cgi: escape url in 403 error output