allow sending to any parent origin
Merge branch 'cross-origin-postmessage'