Block `\href{javascript:evil}` links from math (#cben/mathdown#13).