Sanitize shouldn't filter out URLs without protocol.