Using `*` isn't the best choice. Read `targetOrigin` https://developer.mozilla.org/en-US/docs/Web/API/window.postMessage#Syntax. It can probably be more specific here, right?