Fall back to window.location.origin when baseUrl is empty or relative, supporting same-origin deployments while maintaining origin validation.
Fall back to window.location.origin when baseUrl is empty or relative, supporting same-origin deployments while maintaining origin validation.