Currently, global IDs are generated using the full Base64 charset. This includes the characters + and /, which are not safe for displaying in URLs.

The implementation the base64 utilities found here should use urlsafe_b64encode and urlsafe_b64decode respectively.