added data url type settings for security