Notify policy leaking URLs to origin server