comment security fixes