wrapped variables to prevent code execution