tighten importScripts security

importScripts can be used to leak data through the requested URL.