Reminder to sanitize this input at some point in the flow -- maybe here (or maybe not). An attacker could potentially craft an evil url if you just accept user input without whitelisting chars, limiting length, etc.