It's not earth shaking, but surprising. Maybe try to parse the endpoint and if it's not a valid URL, disable it?