create inspector server and use postMessage for CORS