[security] Disallow file:// links

[niccokunzmann]

in order to safely host the OWC, not just in docker but as native extension, we need to disallow file:// links or else you can spy on the server.

---

We're using Polar.sh so you can upvote and help fund this issue. We receive the funding once the issue is completed & confirmed by you. Thank you in advance for helping prioritize & fund our work.