added security check for uri containing ..