Embeds reach out to third parties on render, so default to a placeholder that mirrors the tool-approval UX: "Load <service>" (this embed) or "Always allow <service>" (persisted). A desktop-local store ($embedMode ask|always|off + per-service allowlist) gates the fetch with zero gateway round-trip; an Appearance setting controls the global default. Local renderers (mermaid, svg, alerts) are never gated. Addresses review feedback on outbound third-party requests. |
||
|---|---|---|
| .. | ||
| providers | ||
| alert.test.tsx | ||
| alert.tsx | ||
| embed-consent.tsx | ||
| embed-size.ts | ||
| escape-html.ts | ||
| fail.tsx | ||
| frame-embed.tsx | ||
| index.ts | ||
| mermaid-embed.tsx | ||
| registry.tsx | ||
| rich-boundary.tsx | ||
| scroll-gate.tsx | ||
| social-embed.tsx | ||
| spotify-embed.tsx | ||
| svg-embed.tsx | ||
| types.ts | ||
| url-embed.tsx | ||
| use-is-dark.ts | ||
| youtube-embed.tsx | ||