fix: protect url generation against parameter injection + docs

[daniiiol]

• protection of parameter injection -> query param data
• small docs update and change from latest to dev tag for local docker builds