htmlentitize URLs