fixes #778 - Security issue