Add javascriptURLs option to SanitizerConfig and Sanitizer Link copied!
https://github.com/whatwg/html/pull/12898
Sanitizer API also sanitizes javascript:-URLs, when they are used for navigation. This was originally done as a side effect of any "safe" method that uses Sanitizer, and omittted for any "unsafe" method. The HTML standard recently regularized this and made this a developer-selectable option, instead of a side-effect of a particular method.
Behaviour when the option is not used remains the same.