When protecting tags, it's very normal to use characters that are not
safe to use in a url like `/` or `*`. This change should make it safe.