in src/common/helper.js [118:126]
export function isTrustedOpener() { try { return ( window.opener && window.opener.origin === 'https://echarts.apache.org' ); } catch { // CORS } }