HotSpot Block- Whitelist Domain and Prevent Xss attack

[RitwikSrivastava]

When isVideoVariant is true, the code creates a new URL object from the content string. This can help prevent XSS attacks because it ensures that the content string is a properly formatted URL. If it's not, an error will be thrown and caught, preventing any potentially malicious code from being executed.

Additionally, the code checks if the hostname of the URL is included in a list of allowed video domains. This is another measure that can help prevent XSS attacks, as it restricts the sources of the videos to trusted domains

Fix #

Test URLs:

• Before: https://main--franklin-assets-selector--hlxsites.hlx.live/hotspot-block/hotspot
• After: https://hotspotblock--franklin-assets-selector--hlxsites.hlx.live/hotspot-block/hotspot

[aem-code-sync]

Hello, I'm the AEM Code Sync Bot and I will run some actions to deploy your branch and validate page speed.
In case there are problems, just click a checkbox below to rerun the respective action.

• Re-run PSI checks
• Re-sync branch

Commits

• d8013b9 ✅ (latest)
• 9173177 ✅
• d0f26f6 ✅
• bc643de ✅

[aem-code-sync]

	Page	Scores	Audits	Google
📱	/hotspot-block/hotspot
🖥️	/hotspot-block/hotspot

[sdmcraft]

Please address linting errors.