Targets BroadcastChannel.postMessage and MessagePort.postMessage sinks from iast_web_messaging_channels.
Taint origin may be ?message=..., hash fragments, or the textarea when primed.
BroadcastChannel uses the "ptk-iast" topic; MessageChannel leaks data to its paired port.