Allowing literal URLs so things like & don't get escaped