it is now vuln, but needs some filters