Fix borked check for malicious URLs.