Validate and brand a string as an absolute HTTPS URL.
Validates using new URL() to ensure structural correctness, checks
that the protocol is https:, and rejects characters that are unsafe
in HTML attribute contexts (quotes, angle brackets, whitespace, control
characters) to prevent attribute-injection/XSS.
Validate and brand a string as an absolute HTTPS URL. Validates using
new URL()to ensure structural correctness, checks that the protocol ishttps:, and rejects characters that are unsafe in HTML attribute contexts (quotes, angle brackets, whitespace, control characters) to prevent attribute-injection/XSS.