fix security

Merged Jose Luis Zanotti requested to merge js-fix-security into 7.0

Merge request reports