You can already do this.

As always the only defense is to compare what is being asked for with the FQDN.