Symfony version(s) affected

6.1.*

Description

According to HtmlSanitizerConfig documentation, allowLinkHosts and allowMediaHosts default value must be null to allow any hosts:

These values are set from FrameworkBundle configuration where we use arrayNode to describe them, so we get an empty array instead of null.

The result is that every URLs are filtered by default

How to reproduce

Configure a basic sanitizer

framework:
  html_sanitizer:
    sanitizers:
        app.default_sanitizer:
            allow_safe_elements: true

$sanitized = $appDefaultSanitizer->sanitize('<a href="https://symfony.com">hello</a>');
// <a>hello</a>

Possible Solution

No response

Additional Context

No response