Use CGI::escape instead of URI.escape

URI.escape is bad. This fixes 1 + 1 not being escaped properly.