Exposing the uri can lead to XSS... this need to be escaped