Added  and  to the filter list to prevent known XSS attack via these URI protocols.
Merge pull request #4 from allen/master

Added `feed` and `data` to the filter list