Translations:Extension:Widgets/104/en

This allows only URL schemes listed in $wgUrlProtocols, and, unlike PHP validation, does not allow URLs with characters dangerous in HTML.