Test: Url Spoofing bug