This page is intentionally vulnerable to postMessage XSS for research purposes.
Target for testing: innerHTML sink with no origin validation.
innerHTML