Hm, shouldn't this be done when generating the `avatar` URL instead of inline here? I believe we get that URL from the server, so I would think that'd be the best place to do this. Also, since the URL is based on the user's email (and assuming we validate their email correctly), I don't think there are any valid characters in an email that we'd need to escape / quote. But correct me if I'm wrong here.