antoniop
committed
on 18 Mar
Strenghten validation against smarter attempts to disguise the javascript: protocol