bug 893: sanitizing variables