attacker.com — Tab 2 (keep-alive)

This tab shares the renderer process with Tab 1's original attacker.com document, keeping that process (and the stashed mojo::Remote<ImeRenderWidgetHost>) alive after Tab 1 navigates cross-process to victim.com.