don't hardcode the buffer for escaped urls