fix(security): restrict link protocols to http and https

[Meierschlumpf]

Homarr

Thank you for your contribution. Please ensure that your pull request meets the following pull request:

• Builds without warnings or errors (pnpm buid, autofix with pnpm format:fix)
• Pull request targets dev branch
• Commits follow the conventional commits guideline
• No shorthand variable names are used (eg. x, y, i or any abbrevation)

[deepsource-io]

Here's the code health analysis summary for commits f4f02ca..326d39e. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
JavaScript	✅ Success		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	21.25%	8016 / 37706
🔵	Statements	21.25%	8016 / 37706
🔵	Functions	24.76%	290 / 1171
🔵	Branches	61.39%	865 / 1409

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
packages/validation/src/app.ts	100%	100%	100%	100%
packages/validation/src/integration.ts	100%	100%	100%	100%
packages/validation/src/search-engine.ts	100%	100%	100%	100%
packages/widgets/src/iframe/component.tsx	0%	0%	0%	0%	1-89

Generated in workflow #4530 for commit 326d39e by the Vitest Coverage Report Action