security fix, add & enforce attribute homeserver-allowed="*" or array of homeserver URLs also fix focus on active links on profile & player
security fix, add & enforce attribute homeserver-allowed="*" or array of homeserver URLs also fix focus on active links on profile & player