Add unsafe character to url format check