<CALx_OUAHHhhmA6jrd2q+V5gtsODtUU7hzARN1w2_F1Cmn+3O6A@mail.gmail.com>
Current votes: None.
What about javascript: URLs?
Right now, every browser seems to treat javascript:alert('#') in an
"intuitive" manner.
This likely goes beyond data: and javascript:, so I think it would be
useful to look at it more holistically.
/mz