[npo] Improve _VALID_URL (closes #13376)