Added comments and missing return statement in is_untrusted_url()