knox workaround, to prevent domain:/ URLs