Using URL parameters safely in a User-Defined Tag