Add option for stronger escaping of / character, according to OWASP