Sentry ignores the in-app browser's own scripts

Facebook's Android browser injects a performance logger under iabjs://
and its bridge dies on unload; the error wore our name (WIZWAR-6).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jm2auWk6RP71CjaAb4FMoG

packages/web/src/main.ts

@@ -4,7 +4,14 @@ import * as Sentry from "@sentry/browser";
 // Errors only — no tracing, no replay. Without a DSN baked at build time
 // (VITE_SENTRY_DSN in .env.production) this is entirely inert.
 if (import.meta.env.VITE_SENTRY_DSN) {
-  Sentry.init({ dsn: import.meta.env.VITE_SENTRY_DSN, environment: "production" });
+  Sentry.init({
+    dsn: import.meta.env.VITE_SENTRY_DSN,
+    environment: "production",
+    // Facebook's in-app browser injects its own scripts (iabjs://) and
+    // reports their failures as ours when the page unloads.
+    denyUrls: [/^iabjs:\/\//],
+    ignoreErrors: ["Java object is gone"],
+  });
 }
 
 // A page loaded before a deploy may ask for a chunk the deploy retired.