Keep blob: URLs containing file: origins as an exercise for the reader

[annevk]

See whatwg/url#780 for a small tweak. You initially aligned with the standard in #48157, though I'm somewhat surprised that worked. Perhaps Node.js never has file: URLs as authority when running scripts?