Avoid wildcard `postMessage` targets
`postMessage` calls should not use `*` as the target origin when they carry application data.
#Metadata
#Why it matters
Wildcard targets allow the browser to deliver the message to any origin that receives the window reference.
#Remediation
Set the target origin to a strict expected origin instead of `*`.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.postmessage-wildcard-origin.rule.yaml.