disallow the use of HTTP in hyperlinks (no-http) HTTP is not safe enough. Rule Details Fail 'http://github.com' '&url=http://github.com' Pass 'https' 'http' '//github.com' 'https://github.com' '&url=https://github.com' 'http://127.0.0.1' 'http://localhost'