PASS: null security context for URL did not crash