added http and forwardslash protections