Restrict URL to only http & https