Validate root-relative URLs