Use proper host validation for mailto: / https:

[jrconlin]

These values should use minimally validated hostnames (e.g.

"domain.foo"
"localhost"
"1.2.3.4"
"8001::"

etc.

[jrconlin]

closed w/ #90