antoniop
committed
on 16 Feb 24
Manually replace the ":" entity to prevent attempts at disguising "javascript:" links