LPS-49451 Limit allowed protocols to http and https

Hi Ray, here is the fix of XSL portlet.

I'm not sure with the XLS portlet init parameters. Should I rather read them during activation by referencing XLSContentPortlet service?