Morfy: Sanitize URL to prevent XSS - Cross-site scripting