allow http URLs in the receipt