fixed internal link security bug