Activity: Add check to target before redirection.

Using parse_url('/foo/bar', PHP_URL_HOST) and checking for null or equality is going to be safer. A hacker can currently get past this with a schemaless // url.