Merge spectator's escape brackets commit for Rails 3-0-stable

It seems that rails 3-0-stable doesn't escape these elements in the
URL, whereas later versions of Rails do.