Rework redirection URL allowance check (#3329)

Cleans redirection URL check that got extended in the wrong way by #3182.

Supersedes (and includes for contribution attribution) #3300. Fixes #3315.

---------

Co-authored-by: Louis-Philippe Bedard <lpbedard@coveo.com>