sanitize url in isURLInPortal