escape URNs in the query