mark safe the url