Check that a cross-site iframe can't navigate its top window if the user hasn't interacted with it, even if its parent window is same-site. Gain user activation