fix(security): close remaining indirect code bypasses (1.10.3)

fix(security): close remaining indirect code bypasses (1.10.3) #27245