The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc9352 and ada7a4ae.
mentioned in commit 9c195d45