Thank you for pointing me to this threat. In this case my script generates the URLs, so it should be fine.