Probes: child-window primitives must be neutralized

eval:
fetch:
cookie:

Probes: cross-realm contentDocument primitives must be neutralized

contentDocument:
cd.cookie:
cd.write:
cd.querySelector:

Control: benign ref read still works

tagName:

Active exfil attempts (must fire no network request carrying the secret)