Escape URL query string