Sanitize the value of url and urls keys in the same way that the values of uri and uris keys are sanitized #25387
Description
Raised in #25384, I think it makes sense to sanitize the values of url and urls fields in the same way as we sanitize the values of uri and uris fields.
Flagging for team attention in case I've overlooked a reason for URLs to be handled differently to URIs.