fix security vulnerability
data export works, but table columns are not conform to specification