We have constants in the setting model for various types, so you'd just define one for URI_ATTRS and add a single validator.

This isn't a *restriction*, it's a validation that the data entered won't generate an exception later when we come to use it.  It's an early catch to prevent invalid data from breaking the application or UI.