diff --git a/docker/envoy/envoy.yaml b/docker/envoy/envoy.yaml
index 16df6f3..e1aff4a 100644
--- a/docker/envoy/envoy.yaml
+++ b/docker/envoy/envoy.yaml
@@ -28,6 +28,9 @@
                 allow_origin_string_match:
                 - prefix: "https://twpt-dashboard.avm99963.com"
                 - prefix: "https://twpt-dashboard-frontend.web.app"
+                - prefix: "chrome-extension://hpgakoecmgibigdbnljgecablpipbajb"
+                - prefix: "chrome-extension://memmklnkkhifmflmidnflfcdepamljef"
+                - prefix: "moz-extension://" # Mozilla extensions use random UUIDs.
                 allow_methods: GET, PUT, DELETE, POST, OPTIONS
                 allow_headers: keep-alive,user-agent,cache-control,content-type,content-transfer-encoding,custom-header-1,x-accept-content-transfer-encoding,x-accept-response-streaming,x-user-agent,x-grpc-web,grpc-timeout,authorization
                 max_age: "1728000"