Fix the potential XSS in URI-like strings with <, > and "