Protect against comments in URI schemes (i.e. java<!-- -->script)