temp. fix: security off

must extract base path