Disallow javascript protocol in IFrameURL using a whitelist of allowed schemes. Includes unit testing and a docblock to IFramePage validate function to explain exceptions and return types
Merge pull request #5 from silverstripe-elliot/disallow-javascript-in-url

Disallow javascript protocol in IFrameURL