Prevent GET:/ from matching POST:/ and escape var.