Fixed a security vulnerability related to url format validation