security: strip newlines embedded in parameters to prevent arbitrary command execution