register blob url as safe