In the absence of templates, the target of external links can be validated right in the tokenizer. This would improve our wikitext escaping, as this also uses the tokenizer to identify problematic syntax.

We currently use a hard-coded list of protocols equivalent to the default value of $wgUrlProtocols. Ideally we would get the list of configured protocols through the API when constructing WikiConfig. It is not clear if $wgUrlProtocols is currently available. If it is not, we could probably expose the value of wfUrlProtocols as an API string.

Version: unspecified
Severity: normal