security fix, pwdgen filter