don't crack down if someone sets object href manually