Special characters are not filtered out on profile fields

While looking around into your web application I noticed in the fields Firstname and Lastname you can set a url . example ` ( http://www.evilsite.com) ` . where I am using special characters like `://` and `.` . but when I try out other special characters - or particularly a payload such as …