     ///   - appScoped: is it an app scoped Bookmark?
     public func releaseSecurizedUrl(originalURL:URL?,appScoped: Bool=false){
         if let url=self._normalizeFileURL(originalURL){
-            if url.isFileURL && !url.isInMainBundle {
-                if self._securityScopedBookmarkExits(url,appScoped:appScoped ){
-                    let key=self._getBookMarkKeyFor(url, appScoped: appScoped)
-                    self._stopAccessingToResourceIdentifiedBy(key)
-                }else{
-                    self.log("Unable to release Bookmark for \(url) appScoped: \(appScoped)", file: #file, function: #function, line: #line, category: Default.LOG_WARNING, decorative: false)
-                }
-            }
+            guard  url.isFileURL == false , url.isInMainBundle, self.urlIsInAppContainer(url: url) else{
+                // Block any distant url or containerized URL
+                return
+            }
+            if self._securityScopedBookmarkExits(url,appScoped:appScoped ){
+                let key=self._getBookMarkKeyFor(url, appScoped: appScoped)
+                self._stopAccessingToResourceIdentifiedBy(key)
+            }else{
+                self.log("Unable to release Bookmark for \(url) appScoped: \(appScoped)", file: #file, function: #function, line: #line, category: Default.LOG_WARNING, decorative: false)
+            }
+
         }
     }
 

            // To create a document-scoped bookmark, use the absolute path (despite this parameter’s name) to the document file that is to own the new security-scoped bookmark.

            #if os(OSX)
                data = try (url as URL).bookmarkData(options: URL.BookmarkCreationOptions.withSecurityScope,
                                                     includingResourceValuesForKeys:nil,
                                                     relativeTo: appScoped ? nil : ( self.fileURL ) )
            #else
                data = try url.bookmarkData(options: URL.BookmarkCreationOptions.suitableForBookmarkFile,
                                            includingResourceValuesForKeys: nil,
                                            relativeTo: appScoped ? nil : ( self.fileURL ))

            #endif


    }


    public func urlIsInAppContainer(url:URL)->Bool{
        if let appGroupURL = FileManager.default.containerURL(forSecurityApplicationGroupIdentifier: self.metadata.appGroup){
            if url.absoluteString.contains(string:appGroupURL.absoluteString){
                return true
            }
        }
        return false
    }


    /// Release the access to the sandboxed securized URL
    /// Each acquireSecurizedURLFrom(...) must be balanced by releaseSecurizedUrl(...)
