Adding security, to block code injection via URL