Prevent tarball URL pointing to localhost