[KevinH]

Then I edited main.cpp to disable adding the URLInterceptor and tried the test case again. Without the interceptor, the Desktop test.png was successfully loaded.

So it does appear to provide some protection!