Allow "" as target url and source origin