diff --git a/workspaces/netlify-cms-auth/src/callback.ts b/workspaces/netlify-cms-auth/src/callback.ts
index f50a16a401..c942792705 100644
--- a/workspaces/netlify-cms-auth/src/callback.ts
+++ b/workspaces/netlify-cms-auth/src/callback.ts
@@ -60,7 +60,9 @@ function postMessageHTML({ status, data }: PostMessageHTMLArgs) {
     <script>
       function receiveMessage (message) {
         const allowedOrigin = (
-          /^https:\\/\\/[-_\\w]+\\.starknet-netlify-cms-byd\\.pages\\.dev$/.test(message.origin) ||
+          message.origin === 'http://localhost:1234' ||
+          message.origin === 'http://127.0.0.1:1234' ||
+          message.origin === 'https://netlify-cms-auth.haim-6b2.workers.dev/' ||
           /^https:\\/\\/[-_\\w]+\\.starknet-netlify-cms\\.pages\\.dev$/.test(message.origin)
         );