Create SECURITY.md

[Dargon789]

---

PR-Codex overview

This PR introduces a SECURITY.md file outlining the security policy and updates the embed-setup.tsx file to enhance the validation of API keys by refining the domain checking logic.

Detailed summary

• Added a SECURITY.md file with:
  • Supported versions table.
  • Instructions for reporting vulnerabilities.
• Modified embed-setup.tsx:
  • Improved validApiKey function to check domains against a list of allowed hosts.
  • Utilized URL object for domain validation.
  • Enhanced logic to ensure proper API key validation based on services.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 01de234

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

@Dargon789 is attempting to deploy a commit to the thirdweb Team on Vercel.

A member of the Team first needs to authorize it.

[graphite-app]

How to use the Graphite Merge Queue

Add either label to this PR to merge it via the merge queue:

• merge-queue - adds this PR to the back of the merge queue
• hotfix - for urgent hot fixes, skip the queue and merge this PR next

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

[Dargon789]

Create SECURITY.md #6144

[joaquim-verges]

can you explain the motivation for this PR?

[MananTank]

FYI - The Embed page has been removed from dashboard