Check STOMP headers against ending backslash

Issue: SPR-12418
(cherry picked from commit 1803348)
Polishing
Apply extra checks to static resource handling

- remove leading '/' and control chars
- improve url and relative path checks
- account for URL encoding
- add isResourceUnderLocation final verification

Issue: SPR-12354
Next Development Version