This changed very recently, that it is allowed now! No additional configuration changes were required. The Microsoft documentation is below.

https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/websocket