Better validation of IRI checking in SanitiseUri()