feat(server): native safe fetch (#14931)

blocksuite/affine/shared/src/services/embed-iframe/embed-iframe-config.ts

@@ -66,6 +66,10 @@ export type EmbedIframeConfig = {
    * The function to build the oEmbed URL for fetching embed data
    */
   buildOEmbedUrl: (url: string) => string | undefined;
+  /**
+   * Validate the final iframe src before rendering.
+   */
+  validateIframeUrl?: (iframeUrl: string, originalUrl?: string) => boolean;
   /**
    * Use oEmbed URL directly as iframe src without fetching oEmbed data
    */