Treat request URL as CDATA so query string params don't result in invalid XML