fix some security issue

[dzb]

how to contribute the fix code? create this issue to test

[robaho]

Create an issue and a pull request linked to the issue.