added escaping for user content coming in to urlPattern regex