Needs CGI escape for when full urls are passed as values