Allow CORS requests for mini manifests (bug 994423)