Don't allow untrusted content on about: url

This should help `about:startup` to load with Mozilla 22+.