It has been reported that the properties set on an object passed to showModalDialog were
readable by the document contained in the dialog, even when the document was from a
different domain. This is a violation of the same-origin policy and could result in a
initialized by another site.