tests and eurc

shared/interfaces/Catcrafts.Shared-Html.cppm

@@ -158,6 +158,10 @@ export SafeHtml Url(std::string_view attrName, std::string_view href) {
            StartsWithNoCase(cleaned, "https://")
         || StartsWithNoCase(cleaned, "http://")
         || StartsWithNoCase(cleaned, "mailto:")
+        // EIP-681 payment links on the order page. Like mailto:, a pure
+        // protocol-handler scheme: the browser hands it to a wallet or does
+        // nothing. No script context is reachable through it.
+        || StartsWithNoCase(cleaned, "ethereum:")
         // Site-relative, but NOT protocol-relative ("//evil.example" would
         // leave the origin while looking like a path).
         || (cleaned.size() >= 1 && cleaned[0] == '/'