XXX: Escape "<" and ">" characters in URL hash