- Sanitize URL to avoid potential injection attack (many thanks to Frank for reporting it)