It's possible to spoof dialog window origin.
vulners.com/securityvulns/securityvulns:doc:8918
vulners.com/securityvulns/securityvulns:doc:8919
vulners.com/securityvulns/securityvulns:doc:8920
vulners.com/securityvulns/securityvulns:doc:8921
vulners.com/securityvulns/securityvulns:doc:8922
vulners.com/securityvulns/securityvulns:doc:8923