Make the 'uri' attribute readonly too
Oops.  Fix my regexp to avoid embedded newlines.