escape requested URLs prior to rendering