Comment by meatsock

in the past i've found that replacing all instances of 'http' with 'hxxp' in data from untrusted or dangerous sources will reduce the chances of accidentally accessing URIs that you would not want anyone to be able to go to accidentally. it's an extra hoop to jump through, like spelling out an email address to stymie spam harvestors.