const LOADED = true; parent.postMessage({ result: "script-allowed" }, "*");