fixed cross site issue with options