mozilla-b2g/gaia — pull request #8717 by gtorodelvalle (2013-03-19 16:26:46+00:00)
Title: Bug 845487 - Dialer responds to cross-origin messages without verifying the source (exploitable) (r=jmcanterafonseca)

Including an origin in every postMessage in the Communications app and checking the origin on every message handler as recommended in https://developer.mozilla.org/en-US/docs/DOM/window.postMessage#Security_concerns .