Adding www.pandora.com worked for me too, weird, that [*.]pandora.com didn't seem to work.
Or you can probably just disable click-to-play if you don't need it. Have to use vpn here, cause I'm outside US.