[FIX] web: properly encode db and addons URL parameters

Passing the values unescaped could be a source of errors
and a XSS vector.
[MERGE] web: properly encode db and addons URL parameters
Launchpad automatic translations update.