sameHost check with https: urls

[finchi]

Hello,

I encountered an issue with a CDN that blocked the x-csrf-token header. Since the CDN and the requesting site have different hostnames, I was initially confused about where the problem was originating.

After reviewing the code, I found the following line and was wondering why https: is not included here:

request.js/src/fetch_request.js

Line 52 in f3460a1

if (!this.originalUrl.startsWith('http:')) {

Is this an oversight, or is there another reason for omitting https:?