SECURITY FIX: Fix vulnerability to manipulate extension links and execute any arbitrary remote
script with the return of its (unfiltered) response because there isnt any validation of the requested URL (thanks to the T3 security team).