Fix code scanning alert no. 1: Incomplete URL scheme check

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

src/index.ts

@@ -87,7 +87,7 @@ function setupOpenSelfInNewTabLink() {
  */
 function isValidSuspectHref(href: string) {
   /* eslint-disable-next-line */
-  const disallowedProtocols = ['javascript:'];
+  const disallowedProtocols = ['javascript:', 'data:', 'vbscript:'];
   const parsedSuspectHref = new URL(href);
 
   return disallowedProtocols.indexOf(parsedSuspectHref.protocol) < 0;