fix secu issue on run