docs: public HtmlPolicyBuilder disallowUrlProtocols(String... protocols) {
      invalidateCompiledState();
      for (String protocol : protocols) {
        protocol = Strings.toLowerCase(protocol);
        allowedProtocols.remove(protocol);
      }
      return this;
    }