Sonar reports cross-origin vulnerabilities

Sonar check reports vulnerable code constructs when using window.postMessage calls with `*` as targetOrigin.

The origin specification should be changed to reflect the env of deployment, i.e. specific URL.