The video player is coming back
Correct security filter even if the mediaserver url doesn't end with a /