URL must start with http:// and any of the safe URLs.