Add URL security checks