<!DOCTYPE html>
<script>
var w = new Worker("/xmlhttprequest/resources/insecure-xhr.js");
w.onmessage = function (e) {
    if (window.opener)
        window.opener.postMessage(e.data, '*');
};
</script>