gomarkdown/markdown IsSafeURL panics on short URLs

Summary IsSafeURL slices url:nPath before checking that lenurl = nPath, so a URL shorter than a path prefix 0, 1 or 2 bytes triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening flag is enabled and the input contains an empty or very short link destination...