The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc9352 and ada7a4ae. Backport of 552f0386 from master.