attacker.test (main frame, compromised renderer)