Fix potential self XSS in request url.
Merge pull request #541 from STRML/master

Fix self XSS in request url.