Fixes

• Fixes a harmless CORS error that was appearing in the browser console when third-party client scripts make calls using the postMessage API.