[-] security: escape

escape variables