[-] security: escape

escape variable