add vuln for one controller across two files