Gerrit

Affected Version: 3.7.0

What steps will reproduce the problem?
1. Add "foo://bar.baz" to the commit message
2. Observe the link to "about:

What is the expected output?
Either having it rendered it as plain text (this is what 3.5.3 does), or <a href="foo://bar.baz/> (which is arguably less secure).

What do you see instead?
<a href="about:invalid#zClosurez" rel="noopener" target="_blank">foo://bar.baz</a>

What is the output of the JS console log (if applicable)?
nothing interesting

What is the performance record (see https://developers.google.com/web/tools
/chrome-devtools/evaluate-performance/reference#record)(if applicable)?
nothing interesting

Please provide any additional information below.
This prevents us from using this section:
[commentlink "radar"]
match = \b(1?[0-9]{7,8})\b
link = foo://problem/$1
which worked fine in 3.5.3.