You would need to use use_dynamic_url: true in the manifest to create a unique one.
Yeah, this is the easiest way to get around it
Or just not allow them to load the URIs at all
Yeah, this is the easiest way to get around it