From b7fdeb79c20bd6b83f203dbfdbb4e615b8ee6f27 Mon Sep 17 00:00:00 2001
From: Tanmay Deep Sharma <32020192+tds-1@users.noreply.github.com>
Date: Thu, 10 Jul 2025 18:05:37 +0700
Subject: [PATCH] add web.facebook.com as valid host for WA ES

---
 .../dashboard/composables/useWhatsappEmbeddedSignup.js      | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js b/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js
index dc8da1fe8..fce02296e 100644
--- a/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js
+++ b/app/javascript/dashboard/composables/useWhatsappEmbeddedSignup.js
@@ -252,7 +252,11 @@ export function useWhatsappEmbeddedSignup() {
     // Handle Facebook embedded signup message events
     try {
       const originUrl = new URL(event.origin);
-      const allowedHosts = ['facebook.com', 'www.facebook.com'];
+      const allowedHosts = [
+        'facebook.com',
+        'www.facebook.com',
+        'web.facebook.com',
+      ];
       if (!allowedHosts.includes(originUrl.hostname)) return;
     } catch (error) {
       // Invalid origin URL, reject the event