no check for validity of CDN url