fix potential diffbot injection bug