aha, find the leak of reversed url for github