diff --git a/modules/apps/portal-security/portal-security-antisamy/build.gradle b/modules/apps/portal-security/portal-security-antisamy/build.gradle
index 604f3aea60a8f4..d034c60c1340ed 100644
--- a/modules/apps/portal-security/portal-security-antisamy/build.gradle
+++ b/modules/apps/portal-security/portal-security-antisamy/build.gradle
@@ -43,7 +43,10 @@ processSanitizerConfiguration {
 		}
 
 		if (line.contains('<regexp name="onsiteURL" value=')) {
-			line = '		<regexp name="onsiteURL" value="^(?![\\p{L}\\p{N}\\\\\\.\\#@\\$%\\+&amp;;\\-_~,\\?=/!]*(&amp;colon))[\\p{L}\\p{N}\\\\\\.\\#@\\$%\\+&amp;;\\-_~,\\?=/!]*"/>'
+			line = '		<regexp name="onsiteURL" value="^(?![\\p{L}\\p{N}\\\\\\.\\#@\\$%\\*\\+&amp;;\\-_~,\\?=/!]*(&amp;colon))[\\p{L}\\p{N}\\\\\\.\\#@\\$%\\*\\+&amp;;\\-_~,\\?=/!]*"/>'
+		}
+		else if (line.contains('<regexp name="offsiteURL" value=')) {
+			line = '		<regexp name="offsiteURL" value="(\\s)*((ht|f)tp(s?)://|mailto:)[\\p{L}\\p{N}]+[\\p{L}\\p{N}\\p{Zs}\\.\\#@\\$%\\*\\+&amp;;:\\-_~,\\?=/!\\(\\)]*(\\s)*"/>'
 		}
 		else if (line.contains('<tag-rules>')) {
 			line = """\