probably fixed url exploit #316