antoniop
committed
on 16 Feb
Manually replace the ":" entity to prevent attempts at disguising "javascript:" links