The iubenda-cookie-law-solution plugin prior to 2.3.5 for WordPress does not restrict URL sanitization to http protocols.
iubenda iubenda-cookie-law-solution