core: m_rsc - sanitize the uri input