mozilla-b2g/gaia — pull request #8738 by gtorodelvalle (2013-03-21 10:17:09+00:00)
Title: Bug 845487 - Dialer responds to cross-origin messages without verifying the source (exploitable).

Including an origin in every postMessage in the Communications app and checking the origin on every message handler as recommended in https://developer.mozilla.org/en-US/docs/DOM/window.postMessage#Security_concerns .