fixed tag security bug