Strip JavaScript links.

Links can not execute JavaScript due to CSP.