fix: remove picture-in-picture from youtube iframe for security reason

Related to https://trello.com/c/0D0AeCom/103-mac-trying-to-access-users-webcam

src/main/frontend/components/block.cljs

@@ -804,7 +804,7 @@
                   [:iframe
                    {:allow-full-screen "allowfullscreen"
                     :allow
-                    "accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
+                    "accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope"
                     :frame-border "0"
                     :src (str "https://www.youtube.com/embed/" youtube-id)
                     :height height
@@ -821,7 +821,7 @@
                   [:iframe
                    {:allow-full-screen "allowfullscreen"
                     :allow
-                    "accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
+                    "accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope"
                     :frame-border "0"
                     :src (str "https://player.vimeo.com/video/" vimeo-id)
                     :height height

src/main/frontend/dicts.cljs

@@ -42,7 +42,7 @@ some changes on the right sidebar, those referenced blocks will be changed too!
         [:iframe
          {:allowFullScreen \"allowfullscreen\"
           :allow
-          \"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\"
+          \"accelerometer; autoplay; encrypted-media; gyroscope\"
         :frameBorder \"0\"
         :src \"https://www.youtube.com/embed/Afmqowr0qEQ\"
         :height \"367\"