fix this small security vunriblity