Probes: child-window primitives must be neutralized
Probes: cross-realm contentDocument primitives must be neutralized
Control: benign ref read still works
Active exfil attempts (must fire no network request carrying the secret)