diff --git a/backend/core/settings.py b/backend/core/settings.py
index d39cbe0..8b7968c 100644
--- a/backend/core/settings.py
+++ b/backend/core/settings.py
@@ -23,7 +23,10 @@
 # ALLOWED_HOSTS = os.environ.get('DJANGO_ALLOWED_HOSTS').split(' ')
 
 CORS_ORIGIN_ALLOW_ALL = False
-CORS_ORIGIN_WHITELIST = ['http://localhost:3000', ]
+CORS_ORIGIN_WHITELIST = ['http://localhost:3000',
+                         'https://merch-site.netlify.app',
+                         'https://deploy-preview-*--merch-site.netlify.app'
+                         ]
 
 # Application definition