diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index adf2d98..a516e01 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -12,7 +12,7 @@ class ApplicationController < ActionController::Base
   def set_headers
     headers['Access-Control-Allow-Origin'] = 'lvh.me'
     headers['Access-Control-Allow-Methods'] = 'POST, PUT, DELETE, GET, OPTIONS'
-    headers['Access-Control-Request-Method'] = 'lvh.me'
+    headers['Access-Control-Request-Method'] = '*'
     headers['Access-Control-Allow-Headers'] = 'Origin, X-Requested-With, Content-Type, Accept, Authorization'
   end
 
diff --git a/app/views/welcome/index.html.erb b/app/views/welcome/index.html.erb
index 8f7d1de..bc2fcc0 100644
--- a/app/views/welcome/index.html.erb
+++ b/app/views/welcome/index.html.erb
@@ -23,5 +23,19 @@
     <%= decimal_to_word(127786.9) %><br />
     <%= decimal_to_word(599.99) %><br />
     Pellentesque luctus quam quis consequat vulputate. Sed sit amet diam ipsum. <br>
+    <input type="text" id="msg" value="hello" /><br />
+    <input type="text" id="domain" value="lvh.me" /><br />
+    <button onClick="return sendToParent()">Zapisz</button>
+
 </div>
 </div>
+<script type="text/javascript">
+function sendToParent() {
+  var msg = $('#msg').val();
+  var domain = $('#domain').val();
+  parent.postMessage(msg,domain);
+}
+  $(document).ready(function () {
+
+  });
+</script>