audited because .prop prepends url when getting href