Banco Plata confirmation widget — security research PoC

Page origin:
Iframed widget: https://auth.bancoplata.mx/confirmation-widget
Receiver endpoint:

The widget (iframed cross-origin)

Console