switch to regex, enforce passing full url