Api: Do not include absolute URL sources to global asset file.

src/Api.php

@@ -90,6 +90,9 @@ public function run(string $path): void
 			$topModTime = 0;
 			if ($data !== []) { // 3.
 				foreach ($data[$format] ?? [] as $file) {
+					if (preg_match('~^(?:https?:)//~', $file)) { // do not accept URL
+						continue;
+					}
 					$filePath = $this->basePath . '/' . trim($file, '/');
 					if (is_file($filePath) === true) {
 						$modificationTime = (int) filemtime($filePath);