PASS: Cross frame access to a javascript: URL embed in a frame window.open'ed on foreign domain denied!