I think we need better escaping here, because CSS can contain `url('file.png')` or something like that