Prevent attempted cross-domain navigation (experimental).

For now, guard the new logic behind a `experimental-same-origin` config.

Progress on #30.
Merge pull request #72 from nicksay/cross-domain

Prevent attempted cross-domain navigation (experimental).