- Disallow links with relative paths - Disallow iframes with non-http protocols and relative paths Close #13037
* Add test * Fix code for sanitizing nested lists stripping all tags
Fix #10834