Href sanitizer