[#374] Not escaping URLs since they are used in a safe CDATA section, where no entity encoding is needed.