The extension does NOT have host permission for this origin. With site isolation, this document lives in a separate renderer process from attacker.test. If ScriptInjectionTracker::WillExecuteCode() runs against this frame for the extension, the cross-origin process is permanently marked as having run the extension's content/user scripts.