Check we have a proper url.

Will not allow injection attacks