modified GET metadata security check