feat(in-app/v1): safe create object url

feat(in-app/v1): safe create object url #756