We are currently stripping URLs for webRequest and tabs APIs, but there may be other APIs as well that expose URLs. We need to strip those also, and might be useful to have a general-purpose utility function to do this.

We should tackle this after we are done with M56 tasks.