url.c: fix possible use of non-null-terminated string with strlen
tool_formparse.c: fix possible use of non-null-terminated strings