validate url characters