popup blocking avoids popups with hostname not at the beginning of url