postMessage targetOrigin proof-of-concept

Security research PoC for the Mehiläinen bug bounty programme — HackerOne @kujibiki. This page only receives and displays a postMessage. It imitates no site, stores nothing and transmits nothing onward.