SECURITY UPDATE Fixed possible code injection