Bug 1088729 - Only allow http(s) directory links and https/data images [r=adw]