Fix URL sanitization fallback behavior

[losolio]

The URL validation helper should not accept invalid placeholder values through its fallback path. The sanitization logic should fail closed and only allow explicitly supported URLs.