🐛 Fix allowed origins when embedded in iframe

Closes #1518

apps/viewer/src/helpers/server/context.ts

@@ -11,7 +11,10 @@ export async function createContext(opts: trpcNext.CreateNextContextOptions) {
 
   return {
     user,
-    origin: opts.req.headers.origin,
+    origin:
+      (opts.req.headers['x-typebot-iframe-referrer-origin'] as
+        | string
+        | undefined) ?? opts.req.headers.origin,
     res: opts.res,
   }
 }