my $url=~ /([\w-.]+)/;
my $untainted_url = $1;