Added default config param to ignore URL path to prevent XSS and URL
hijack