Add interface of `checkPasscodeAsync()` and `modifyPwdByCodeAsync()`
Update popup logic to prevent Javascript URL