fix: move eslint-disable-next-line to cover javascript: string literal

The multi-line if condition moved the 'javascript:' string to a line
no longer covered by the eslint-disable-next-line directive. Move the
comment inside the if condition so it correctly suppresses no-script-url
on the line containing the string literal.

Author: nperez0111

packages/react/src/util/sanitizeUrl.ts

@@ -8,8 +8,8 @@ export function sanitizeUrl(inputUrl: string, baseUrl: string): string {
   try {
     const url = new URL(inputUrl, baseUrl);
 
-    // eslint-disable-next-line no-script-url -- false positive, we are explicitly checking if the protocol is safe to prevent XSS
     if (
+      // eslint-disable-next-line no-script-url -- false positive, we are explicitly checking if the protocol is safe to prevent XSS
       url.protocol !== "javascript:" &&
       url.protocol !== "data:" &&
       url.protocol !== "vbscript:"