Refactor URLs we allow navigation to (#556)

* Add note that the will-navigate checks aren't fired

* Use default TLS certificate verification handler

The linked document warns against explicitly opting out from
TLS validation. This doesn't require setting a custom handler.

* Refactor trusted navigation urls

* Fix regex typo