allowed domains only

app/layout.tsx

@@ -50,8 +50,6 @@ export const viewport: Viewport = {
   themeColor: "#4f46e5",
 };
 
-// todo add iframe detector, to dont allow people embedding the app in iframes.
-
 export default async function RootLayout({
   children,
 }: Readonly<{
@@ -111,6 +109,7 @@ export default async function RootLayout({
                 {isAllowedDomain ? (
                   children
                 ) : (
+                  // todo: do something fancier here.
                   <p>
                     Unfortunately you don&apos;t have access to DeepSite from
                     this domain: {hostname}.

lib/utils.ts

@@ -10,6 +10,7 @@ export const ALLOWED_DOMAINS = [
   "huggingface.co",
   "deepsite.hf.co",
   "localhost",
+  "enzostvs-deepsite-v4-demo.hf.space",
 ];
 
 export const COLORS = [