Simple Validation to Prevent XSS

In its current form you can inject `javascript:` and presumably `data:` urls in most of the JSON url fields. The below validation proposal, while simple, should prevent at least vectors involving invalid urls in the StackOverflow or Magento Certification fields.