We may need to get smarter than this over time; there are services like media that include stuff like authentication information in the URI, which we don't want to have to match against.