Removed useless URL permissions (because we never inject content inside).