variation set auto-config URL sanitisation added