fix: [security] XSS via galaxy cluster element values for reference types could contain javascript links
fix: [security] XSS via galaxy cluster element values for reference types could contain javascript links

- ref type elements are automatically converted to links. A user would have to click a javascript: link for it to trigger, it's still too risky to keep as is
- only urls starting with http:// and https:// are converted from here on

- As reported by Patrik Kontura from ESET

SteveClement/MISP,SteveClement/MISP,SteveClement/MISP,MISP/MISP,SteveClement/MISP,SteveClement/MISP,MISP/MISP,MISP/MISP,MISP/MISP,MISP/MISP