fix xxe

move bracket