fix: extend dangerous URL scheme check to include data: protocol
#22766
+9
−14
data: protocol
#22766