fix(security): reject link targets a browser would normalize, and move exception messages to the Exception\Message enum.

fix(security): reject link targets a browser would normalize, and move exception messages to the Exception\Message enum. #23