escape download handler URLs