site: override standard manifest
manifest: allow other domains too