fix quotes, allow_url, serialize