fix undefined safe origin

lib/env.js

@@ -39,6 +39,8 @@ module.exports.create = function (config) {
         NO_SANDBOX = true;
         if (typeof(config.httpSafePort) !== 'number') { httpSafePort = httpPort + 1; }
         httpSafeOrigin = deriveSandboxOrigin(httpUnsafeOrigin, httpSafePort);
+    } else {
+        httpSafeOrigin = canonicalizeOrigin(config.httpSafeOrigin);
     }
 
     var permittedEmbedders = config.permittedEmbedders;