toolness/collusion — comment on commit 0abe93eaeb7664ae403afe35771d3a82dde4c292
File: lib/main.js line 161
By toolness:

Instead of blacklisting `about:` urls, we might want to *whitelist* `http:` and `https:` URLs, since there's lots of other protocols that likely won't work here (e.g. `chrome:`, `file:`, etc).