JavaScript, URL normalization, make sure HTML entities are escaped.

normalizeURL.js

/**
 * URL normalization, make sure HTML entities are escaped.
 *
 * @param  String url
 *
 * @return String
 */
export function normalizeURL(url) {
	const fixedEncodeURIComponent = str => encodeURIComponent(str).replace(/[!'()*]/g, x => `%${x.charCodeAt(0).toString(16)}`);

	const newURL = url
		.replace(/&/g, '&')
		.replace(/<|>|\(|\)|!|'|\*|;| |/g, x => fixedEncodeURIComponent(x));

	return trim(JSON.stringify(newURL), '"');
}