earner-recording-settings.uber.com listens for postMessage with type "onDialogAction" but never checks the sender's origin. Any cross-origin page can open it and change a driver's recording settings.
Click "Open Target" first, wait for it to load, then send a payload.