diff --git a/src/you_get/common.py b/src/you_get/common.py
index c99e13da60..567576ef28 100755
--- a/src/you_get/common.py
+++ b/src/you_get/common.py
@@ -369,6 +369,9 @@ def getHttps(host, url, headers, debuglevel=0):
 # DEPRECATED in favor of get_content()
 def get_response(url, faker=False):
     logging.debug('get_response: %s' % url)
+    parsed = parse.urlparse(url)
+    if parsed.scheme not in ('http', 'https'):
+        raise ValueError('Unsafe URL scheme: %s' % parsed.scheme)
     ctx = None
     if insecure:
         # ignore ssl errors