fix for xml chars in url