Bug 845487 - Dialer responds to cross-origin messages without verifying the source (exploitable).