html encode the url when it is written to the page
using a simpler version
Merge pull request #205 from fterrier/escape-input

html encode the url when it is written to the page