Whether an embed URL may be shown: it must be HTTPS and its origin must be in allowedOrigins (by default DEFAULT_ALLOWED_EMBED_ORIGINS).
allowedOrigins
DEFAULT_ALLOWED_EMBED_ORIGINS
Whether an embed URL may be shown: it must be HTTPS and its origin must be in
allowedOrigins(by defaultDEFAULT_ALLOWED_EMBED_ORIGINS).