Escape callback urls