Remove data: from allowed protocols

Too many problems: too long URLs causing "413 Request Entity Too Large", browsers not liking to be redirected to a data URI, etc...