A filter that can used to restrict URL schemes and domains to known-safe values. Stores a map of schemes to domains: if the map is empty, no filtering is performed and any URL is allowed. Each key is a scheme (such as "https"). If a scheme is present, it will be allowed. Each value is an array of absolute domains or partial higher-level domains that are allowed for their scheme.