LPS-49176 Escape URL to prevent injection

Hey @topolik 

Can you review my changes?

Thx!