One extra check.
There is absolutely no reason to allow http_get.