Allow to configure allowed schemes

[Lctrs]

I have a use case where I need to remove all http url from a, img, and iframe nodes (and not converting them to https). This will allow me to do it.

[tgalopin]

Thanks @Lctrs !