JavaScript : Overly permissive message posting policy