diff --git a/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js b/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js index dc8da1fe8..fce02296e 100644 --- a/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js +++ b/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js @@ -252,7 +252,11 @@ export function useWhatsappEmbeddedSignup() { // Handle Facebook embedded signup message events try { const originUrl = new URL(event.origin); - const allowedHosts = ['facebook.com', 'www.facebook.com']; + const allowedHosts = [ + 'facebook.com', + 'www.facebook.com', + 'web.facebook.com', + ]; if (!allowedHosts.includes(originUrl.hostname)) return; } catch (error) { // Invalid origin URL, reject the event