fix secu issue on open portal
Merge remote-tracking branch 'origin/master' into DataManagement