add box url to be safe