Updated sanitizeUriSpec for local urls

Added test for ´local´'s protocol to be sure `local:///` urls are not sanitized neither `src` nor `href`.