Chrome same-origin bypass using the portal element
research.securitum.com