PoC: postMessage origin bypass

This page's origin is . It starts with https://www.telia.ee, so the widget accepts our messages.

Actions: OPEN_CHAT TELIA_AUTH_IN TELIA_AUTH_OUT

Log: