Adding escaping

the and_add_new_redirect() method has no escaping in place opening to some security risks.