escape url before displaying
Merge pull request #4 from pdewouters/master

escape the URL?