recommend actually constructing the url via  net url  and setting the host value to catch  a  accidentally supply a full url  or make a stupid typo b  use the string field to mess with api access naively  e g example com eatyourface 