Be slightly friendlier about blacklisted URIs.

They don't deserve the full evil.js treatment like blacklisted
referrers do.