isSafeLink

Returns false if url uses a javascript:, data:, or vbscript: scheme.