allowing the iframeParent domain to be '*' for targetOrigin. This should only be used when parent cannot be determined at init-time