link replacement is broken in some situations

if you have "myapp.com/signup/verify?token=abc"
and then later a different link,say: "myapp.com"

replacement will occur poorly, doing the replacement of the first properly, but when we replace the second, it also replaces the first causing this malformed link:

myapp.com?source=abc/signup/verify?token=abc&source=abc
