# Protect embed chat by origin
Sometimes your RWC contains security information and should be opened only from special sites. The `Wait for Chat' step receives all the necessary information about the parent page, that can be used to protect chat by origin. Here's a basic example:
- Add Wait for ChatandCheck conditionsteps
- Wait for ChatmergeField contains- headers.originpath with parent page URL
- Use it to split flow three and show a different message for trusted/non-trusted sites
 
WARNING
If you want to use standalone RWC version (separated application) you should also include its own RWC URL (e.g. https://chat.[ENV].onereach.ai/...)
