partial fix #2667
this fixes the ability to replace a space with a /
and skip the XSS filtering
Merge pull request #2670 from DaveMC08/feature/issue_2667

partial fix #2667