added missing escapes to sec-statement on line 38