Check for parsed url host in allowed referers