victim.localhost

This origin never asked for any file access.

Click anywhere in this pane after pressing "2. Trigger" in the attacker pane. When the bubble appears, observe that the thick blue highlight outline is drawn around this pane (and the omnibox shows victim.localhost) even though the bubble title says attacker.localhost wants to edit ….