App registrations use safe redirect URIs

It seems this test is actually looking for anything *.azurewebsites.net, which also includes valid hostnames like https://myapp.azurewebsites.net
Is it checking for wildcards, or shouldn't we use .azurewebsites.net at all? Slightly confused by that. 