CVE-2025-68946: Improper Neutralization of Input During Web Page Generation

In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS...