Parse protocols without slash separators like javascript: or news:

Our sanitizer so far did not strip dangerous protocols like javascript:.
Fortunately the link handler converted invalid protocols into text, which
prevented this bug from becoming a security issue.

This patch tweaks the regexp to also parse protocols with a colon separator
only.

Change-Id: I42630064a0c63892d72ee05644aaccd88d9d5099