We should probably be validating that this looks like a URL.