XSS Vulnerability in link syntax when using "path:". Add protection against NPE