fix cross-domain issues in purl plugin