-
frame 1: html injection in same origin (works)
-
frame 2: without any injection (doesn't work)
-
frame 3: html injection in different origin and same-site (doesn't work)
-
frame 4: html injection in same origin but different fragment (works)
-
frame 5: with location redirect (doesn't work)
-
frame 6: cross-origin meta redirect (doesn't work)