1. frame 1: html injection in same origin (works)
  2. frame 2: without any injection (doesn't work)
  3. frame 3: html injection in different origin and same-site (doesn't work)
  4. frame 4: html injection in same origin but different fragment (works)
  5. frame 5: with location redirect (doesn't work)
  6. frame 6: cross-origin meta redirect (doesn't work)