package.json
conifg: send to iframes the origin url and save the domain
sdk receiver: listen only to specified origins
dom/root/proxy: postmessage only to specific domain
composition frame src
config: listen to specified origin or the same origin
auth syntax error fix
detect: fix for sourceOrigin