The app never fetches or executes the URL — it only formats it into a snippet. Quotes, backslashes, and control characters in the URL are escaped so they can't break out of the Lua string. Missing ...