fix($sanitize): sanitize javascript urls with comments

Closes #8274