Fix Unsanitized Server Variables

Fix unsanitized server variables in `UrlHelper`
Merge pull request #1197 from mkly/fix_unsanitized_server_variables

Fix Unsanitized Server Variables