fix security bug
Merge pull request #2129 from bartcharbon/feature/data-api-annotators

fix security bug