Closure use of non-escaping parameter 'xxx' may allow it to escape