isSameOrigin

Check if two URLs have the same origin (scheme, host, port). Uses semantic URL parsing to prevent SSRF bypasses via URL variations.