Currently, I am using an a with an href. But I don't want the client to be able to fetch the URL.&