code: def escape_link(url):
      
      lower_url = url.lower().strip('\x00\x1a \n\r\t')
      for scheme in _scheme_blacklist:
          if lower_url.startswith(scheme):
              return ''
      return escape(url, quote=True, smart_amp=False)
docs: Remove dangerous URL schemes like javascript: and escape afterwards.