allowed full URLs as EPC path