[npo] Extend _VALID_URL (closes #16682)