Changed to * for allowed domains