[cnn] Relax _VALID_URL again (fixes #5737)