URL Loopback protection