Allow some protocols

Summary: I heard this HTTP thing is pretty good.

Test Plan: @starruler did things which confirmed this is less bad than D4611.

Reviewers: starruler

Reviewed By: starruler

CC: aran

Differential Revision: https://secure.phabricator.com/D4612

src/applications/config/option/PhabricatorSecurityConfigOptions.php

@@ -108,7 +108,13 @@ final class PhabricatorSecurityConfigOptions
             "unique to your install. In particular, you will want to do ".
             "this if you accidentally send a bunch of mail somewhere you ".
             "shouldn't have, to invalidate all old reply-to addresses.")),
-       $this->newOption('uri.allowed-protocols', 'set', array())
+       $this->newOption(
+        'uri.allowed-protocols',
+        'set',
+        array(
+          'http' => true,
+          'https' => true,
+        ))
         ->setSummary(
           pht("Determines which URI protocols are auto-linked."))
         ->setDescription(