Filter \t from URL protocols, same as \n and \r

[dpvc]

This PR adds \t to the characters that are filtered by the Safe extension in URL protocols. This prevents using \t to bypass the safe filtering.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.99%. Comparing base (fc94595) to head (50335a6).

Additional details and impacted files

@@            Coverage Diff             @@
##           develop    #1557     +/-   ##
==========================================
  Coverage    86.99%   86.99%             
==========================================
  Files          390      390             
  Lines        88200    88200             
  Branches      3356     5046   +1690     
==========================================
  Hits         76732    76732             
+ Misses       11468    11448     -20     
- Partials         0       20     +20     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.