OSM/requested entries are fetched by checkSite with https:// prepended, so a javascript: value would fail verification and be dropped, but the card still links the raw website field (see C3). Impact: ...