Merge commit from fork

* fix: sanitize user-media svg api endpoint using isomorphic dompurify

* fix: add iframe sandbox to prevent priviledge escalation

apps/nextjs/package.json

@@ -75,6 +75,7 @@
     "dotenv": "^17.2.3",
     "flag-icons": "^7.5.0",
     "glob": "^11.0.3",
+    "isomorphic-dompurify": "^2.32.0",
     "jotai": "^2.15.1",
     "mantine-react-table": "2.0.0-beta.9",
     "next": "16.0.1",