CSS security fix