This is unecessary since the url value is built from already escaped and validated get vars... but VIP

https://github.com/GigaOM/gigaom/issues/4830
I'm not sure why they don't think the other vars deserve additional sanitization, but would happily not attract additional attention to it.