Clicking on CID link causes webview corruption

b/17378707

Webview became confused attempting to handle a cid URL within the href
attribute of an <a> tag. I have decided to fix this by tightening up
the accepted URLS within the HtmlSanitizer. Now:

1) <a href=""> accepts mailto: http: and https:
2) <img src=""> accepts cid: http: and https:
3) all other URL attributes only accept http: and https:

Test cases were updated to verify the change.

Change-Id: I861226500a93e58dc1c2d40fa4b5916fc40ab48c
3 files changed