This method will call window.postMessage if available, setting the targetOrigin parameter to the base of the target_url parameter for maximum security in browsers that support it.
Register a single callback for either a window.postMessage call, if supported, or if unsupported, for any change in the current window location.hash.