This should definitively rule out any circumstances, where invalid URLs could cause problems.
Both URL validity is checked before it is forwarded to the URL shortener proxy _and_ the host part is explicitly compared to make sure the domain is really the same one.
TOOD:
* [ ] some tests may be needed here (hmpff…)