use strict checking and fix strict violation

I noticed a missing `var` statement which implicitly leaks a global variable. This sort of error is flagged by the VM if `use strict` is in play.

- add `use strict`
- fix violation
- fix missing semicolon