make the vars multiline
Patch CVE-2013-1537