aistudio.heroku.com postMessage origin-validation PoC

This page + the fake inference API are the same host:

Channel: PWN   Injected Bearer: INJECTED_KEY_abc123