self-defense parsing on URLs