Fixes bypass with HTML-encoded whitespace characters at javascript: scheme
New tests added
Merge branch 'master' of github.com:kochetkov/Irv