security fix: replaced strcpy with safeStrCpy from backend.c