diff --git a/internal/agents/preview.go b/internal/agents/preview.go
index 6da5472..e40615f 100644
--- a/internal/agents/preview.go
+++ b/internal/agents/preview.go
@@ -140,7 +140,7 @@ func (m *Manager) servePreview(port int) error {
 		proxy.ServeHTTP(w, r)
 	})
 	go func() {
-		err := (&http.Server{Handler: handler}).Serve(tracked)
+		err := (&http.Server{Handler: http.NewCrossOriginProtection().Handler(handler)}).Serve(tracked)
 		if !errors.Is(err, net.ErrClosed) {
 			slog.Error("serve preview", "port", port, "err", err)
 		}