fix security

src/lib/cards/EmbedCard/EmbedCard.svelte

···
 
 <iframe
 	src={item.cardData.href}
-	sandbox="allow-scripts allow-same-origin"
+	sandbox="allow-scripts"
 	referrerpolicy="no-referrer"
 	class="absolute inset-0 h-full w-full"
 	title=""

src/lib/cards/LivestreamCard/LivestreamEmbedCard.svelte

···
+<script lang="ts">
+	import type { ContentComponentProps } from '../types';
+
+	let {
+		item,
+		sandbox
+	}: ContentComponentProps & {
+		sandbox: string;
+	} = $props();
+
+	// svelte-ignore state_referenced_locally
+	let domain = new URL(item.cardData.href).hostname;
+</script>
+
+{#if domain === 'stream.place'}
+	<iframe
+		src={item.cardData.href}
+		sandbox="allow-scripts allow-same-origin"
+		referrerpolicy="no-referrer"
+		class="absolute inset-0 h-full w-full"
+		title=""
+	></iframe>
+{:else}
+	<div class="p-4">Invalid domain</div>
+{/if}

src/lib/cards/LivestreamCard/index.ts

···
 import EmbedCard from '../EmbedCard/EmbedCard.svelte';
 import type { CardDefinition } from '../types';
 import LivestreamCard from './LivestreamCard.svelte';
+import LivestreamEmbedCard from './LivestreamEmbedCard.svelte';
 import SidebarItemEmbedLivestreamCard from './SidebarItemEmbedLivestreamCard.svelte';
 import SidebarItemLivestreamCard from './SidebarItemLivestreamCard.svelte';
 
···
 
 export const LivestreamEmbedCardDefitition = {
 	type: 'livestreamEmbed',
-	contentComponent: EmbedCard,
+	contentComponent: LivestreamEmbedCard,
 	sidebarComponent: SidebarItemEmbedLivestreamCard,
 	createNew: (card) => {
 		card.w = 2;

todo.md

···
     - social accounts card (multiple)
     - cartoons: aka https://www.opendoodles.com/
     - excalidraw
-    - map
+    - [x] map
     - [x] youtube video
     - youtube channel
     - guestbook
···
     - smoke signal
     - statusphere.xyz
 - add some caching to user data
+
+- other fun card ideas:
+    - svader
+    - zdog
+    - tixy
 
 - image cards: different images for dark and light mode