1. frame 1: html injection in same origin (works)
2. frame 2: without any injection (doesn't work)
3. frame 3: html injection in different origin and same-site (doesn't work)
4. frame 4: html injection in same origin but different fragment (works)
5. frame 5: with location redirect (doesn't work)
6. frame 6: cross-origin meta redirect (doesn't work)