Throw invalidRequest when url is not safe to fetch under the
block-internal policy. Parses with vibe's own parser (the single source of
truth) and classifies the host once. A check-time scheme/host gate (no
fetch) suitable for paths that VALIDATE a URL without fetching it (e.g.
building the authorization-request URL the host will open). The TOCTOU-safe
resolve-and-pin connect for an actual fetch is performed by
secureRequestHTTP.
Throw invalidRequest when url is not safe to fetch under the block-internal policy. Parses with vibe's own parser (the single source of truth) and classifies the host once. A check-time scheme/host gate (no fetch) suitable for paths that VALIDATE a URL without fetching it (e.g. building the authorization-request URL the host will open). The TOCTOU-safe resolve-and-pin connect for an actual fetch is performed by secureRequestHTTP.