Check that a cross-site iframe can't navigate its top window if the user hasn't interacted with it.