Why is the use of TAB (%09) characters in the middle a 'JavaScript:' URL valid? | Heykuki News