URI Injection Fixes