Addressing redactor URL injection issue