update url to html safe