Unblock the vars function in the whitelist

The earlier pull request #256 by @DIdiHL does not unlock the `vars` function properly. This pull requests fixes that, and enables the `vars` function.

PS: Is there any security issue that might happen by allowing the `vars` function?

@raymondtangsc