Safely handle return url parameters.