UrlConfig: reject "javascript" as a scheme.
Added some notes and examples.