url validation bug