use of securityOpenRedirect with mattermost links

[MSAES]

Hi everyone,
I'm trying to add mattermost links (mattermost:////messages/@) from visual editor content (insert link feature) but on the page, link href attribute is removed (example: <a class="is-external-link">michael</a>)

I tried to disable "Block Open Redirect), clear caches, rerender all pages, and even comment code in security.js (WIKI.config.security.securityOpenRedirect) but no luck.

Did I miss something obvious or is it a bug?

FYI, links like mailto: tel: are working without any problem. I'm using local Nodejs server (23.4.0) on Windows OS with separate PostgreSQL DB. I tried to access the link with Chrome, Edge and Firefox latest stable versions. of course I tested the link from browser directly and the link is working :)

Thank in advance for your feedback

Michael