You may need to use esc_url() here.