disable unsafe url