Prevent &# in the "url" filter built-in (may be used to encode a disallowed scheme in unicode)