use window.parent instead of window.top
Add documentation to the postmessage_receiver module. Start a framework to check postMessage origin's.