Fix: allow cross domain