evilstreak/markdown-js — pull request #52 by zauguin (2012-06-14 21:17:38+00:00)
Title: Don't allow unsafe URIs

This fix filter out link and image URIs like javascript:alert(); that are used for XSS.
It uses whitelisting and only allows http(s) and ftp URIs.