Protect postMessage