diff --git a/src/server/server.ts b/src/server/server.ts
index f582616e4..da651a5ff 100644
--- a/src/server/server.ts
+++ b/src/server/server.ts
@@ -50,6 +50,7 @@ const corsWhitelist = [
     'navdialog.cs106.force.com',
     'navdialog.cs108.force.com',
     'navdialog.cs162.force.com',
+    'navdialog--uathot.sandbox.my.site.com',
 ];
 
 const isAllowedDomain = (origin?: string) => origin && corsWhitelist.some((domain) => origin.endsWith(domain));