is this .mid call unsafe if the detailUri is (for whatever reason, ie, malicious application) just the string "aggregate" ?