A site on your own domain behaves like a normal site

Trial sites on our subdomains run in a sandbox, so that someone else's HTML can never touch anything under dorelli.cloud. That sandbox was also applied to sites on a customer's own domain, where it protects nothing of ours and breaks what a normal site needs: a cookie banner that remembers it was dismissed, a setting in local storage, a form that keeps its state. A site on your own domain now gets its own policy without the sandbox; plugins stay blocked and the usual protective headers stay on.