Accepting arbitrary input is a complexity that will be abused. Why not lock it down to a limited set of inputs… or just a heart? `POST /openheart/heart{?url}`