Third party
Open a cross-site popup
postMessage to third party