added rule url to web security