disable file injection for now