I'd like to request whitelisting the following URLS:

www.rijksoverheid.nl/*: Main Dutch government information portal, general information about policies and services.
www.mijnoverheid.nl/*: Personal government services portal - don't allow subdomains as this requires login credentials, potential security risk.
https://wetten.overheid.nl/*: Official Dutch laws and regulations database.
https://ondernemersplein.overheid.nl/*: Government information portal for entrepreneurs and business owners.
www.duo.nl/*: Education financing information (DUO) - don't allow subdomains as there are pages requiring login credentials, potential security risk.
www.uwv.nl/*: Employee Insurance Agency information about unemployment and disability benefits - don't allow subdomains as there are pages requiring login credentials, potential security risk.
www.svb.nl/*: Social Insurance Bank information about state pension and child benefits - don't allow subdomains as there are pages requiring login credentials, potential security risk.
www.kvk.nl/*: Chamber of Commerce business information and registration - don't allow subdomains as there are pages requiring login credentials, potential security risk.
www.ind.nl/*: Immigration and Naturalisation Service official information and procedures.
https://zoek.officielebekendmakingen.nl/*: Official government publications and announcements database.
www.justis.nl/*: Ministry of Justice and Security services and information (VOG, permits).
www.cbr.nl/*: Central Office for Motor Vehicle Driver Testing information about licenses and exams.

This would allow people to embed important dutch information in their Excalidraws. I'm doing research and would greatly benefit from these URL's to be whitelisted. Alternatively, having a client-side whitelist and a way to allow/disallow websites would be a solution. Going from a whitelist to a blocklist would also be an option as mentioned here:

@dwelle, @schoening - Just to add my thoughts on this as well, it's a serious limitation in functionality compared to competitors (e.g., Miro, Lucid) that offer embedding of almost any webpage. I understand the concern about appropriate use but, ultimately, this really does limit the use of Excalidraw as a collaboration tool.

I'd even go so far as to suggest switching from an allow list to a block list could be a more appropriate way to deal with abuse if it happens.

Originally posted by @mathewcsims in #6917