I would prefer to allow arbitrary URI schemes, too.
- It is bound to happen that new, popular schemes will come up.
- Custom URI schemes are useful when extending CommonMark in some scenarios.
- Even the whitelist doesn’t guard reliably against mistaking an XML QName for a URI.