CB-5395: Make scheme and host (but not path) case-insensitive in whitelist