Accept external registries that start with //

this is important for those who support both http and https. I don't know why this was blocked to begin with so a security review would be nice.