Safeguarding URLs with crapy arg(3) and beyond.