v0.12.2

Fixed: a community vote's own reported link could be crafted to run as a script instead of opening as a page, if you ever clicked it. Links are now only ever clickable when they're a plain http(s) address, anything else shows as plain text instead.