Fix unsafe URL launch in attaches_renderer.dart: use Uri.tryParse, restrict to http/https, check canLaunchUrl

Co-authored-by: RZEROSTERN <3065243+RZEROSTERN@users.noreply.github.com>
Agent-Logs-Url: https://github.com/RZEROSTERN/editorjs-flutter/sessions/97759922-db09-4059-af45-b959591f6f85

Author: Copilot

lib/src/presentation/blocks/attaches/attaches_renderer.dart

@@ -16,8 +16,15 @@ class AttachesRenderer extends BlockRenderer<AttachesBlock> {
 
     return InkWell(
       onTap: block.url.isNotEmpty
-          ? () => launchUrl(Uri.parse(block.url),
-              mode: LaunchMode.externalApplication)
+          ? () async {
+              final uri = Uri.tryParse(block.url);
+              if (uri == null) return;
+              final scheme = uri.scheme.toLowerCase();
+              if (scheme != 'http' && scheme != 'https') return;
+              if (await canLaunchUrl(uri)) {
+                await launchUrl(uri, mode: LaunchMode.externalApplication);
+              }
+            }
           : null,
       borderRadius: BorderRadius.circular(8),
       child: Container(