docs: function assertObviousUnsafeUrl(urlString) {
    if (urlString) {
      if (parseUrl(urlString).protocol.indexOf('script') != -1) {
        throw new Error('unsafe "' + urlString + '"');
      }
    }
    return urlString;
  }