anything ended with url should be escaped better