Then they can also pass in an erroneous URI. You still need some way to deal with the ones you're not accepting.