If the notification URL is provided by the user, the extension needs access to arbitrary URLs.