fix path-related security hole