diff --git a/Cargo.lock b/Cargo.lock
index 4d72700..c476f8b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2032,6 +2032,7 @@ dependencies = [
  "scale-info",
  "simple-base64",
  "sp-io",
+ "url 2.5.2 (registry+https://github.com/rust-lang/crates.io-index)",
  "url 2.5.2 (git+https://github.com/servo/rust-url)",
  "verifier",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 4b60c0d..6b9fccf 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -26,6 +26,7 @@ public-suffix = "0.1"
 rand = "0.8.5"
 sha2 = { version = "0.10.8", default-features = false }
 url = { git = "https://github.com/servo/rust-url", default-features = false }
+url-evil = { package = "url", version = "2.5.2", default-features = false }
 
 # FRAME
 codec = { package = "parity-scale-codec", version = "3.6.12", default-features = false, features = [
diff --git a/pass-webauthn/Cargo.toml b/pass-webauthn/Cargo.toml
index 3dd0b94..1d818c9 100644
--- a/pass-webauthn/Cargo.toml
+++ b/pass-webauthn/Cargo.toml
@@ -26,6 +26,7 @@ passkey-client.workspace = true
 passkey-types.workspace = true
 public-suffix.workspace = true
 sp-io.workspace = true
+url-evil.workspace = true
 
 [features]
 default = ["std", "runtime"]
diff --git a/pass-webauthn/src/tests/authenticator_client.rs b/pass-webauthn/src/tests/authenticator_client.rs
index b496c3d..062683d 100644
--- a/pass-webauthn/src/tests/authenticator_client.rs
+++ b/pass-webauthn/src/tests/authenticator_client.rs
@@ -9,7 +9,7 @@ use passkey_types::{ctap2::Aaguid, webauthn::*, Bytes, Passkey};
 
 use sp_io::hashing::blake2_256;
 use traits_authn::{Challenger, HashedUserId};
-use url::Url;
+use url_evil::Url;
 
 use crate::{AssertionMeta, DEREncodedPublicKey};