common/security-features/subresource/template/script.js.template

postMessage({
  "headers": %(headers)s
}, "*");