SECURITY: Don't allow redirects with periods in case you don't control
other tlds on the same domain.