Escape URL in 404 page

This fixes XSS when going to a non-existing page.