Profile Website URL is sanitized breaking URLs with &

When setting a Website URL in the profile the input address is sanitized.

So a valid url like

• https://example.com/q=user&somekey will be sanitized to
• https://example.com/q=user&somekey

this breaks the URL