# Security features

URL: https://docs.emergingtravel.com/docs/fundamentals/security-features/

Tags: fundamentals

---


## URLs

The ETG API requires you to provide the URLs from your server side.

### General

The host URL from your account settings.

### Card payments

The return path URL form the `return_path` field in the Start booking process call ([B2B](/docs/b2b-api/booking/start-booking-process/#return_path), [Affiliate](/docs/affiliate-api/booking/start-booking-process/#return_path)).

This ensures the safety of card data transfer during the booking process:
1. You send a booking request to ETG API.
1. The ETG API extracts the domain with the HTTPS scheme from the `return_path` field.
1. The ETG API extracts the host (without the HTTPS scheme).
1. The ETG API checks compatibility of the host and domain:
   1. If they match, the ETG API redirects the user to the provided URL.
   1. If they don’t match:
      1. The ETG API marks the booking attempt as failed.
      1. The ETG API may redirect the user to the ETG site.