removed mailto: scheme from accepted schemes as it is too difficult to validate the authenticity (ie. the email address exists) & determine if it is an actual request, or just spam