a.test (target site - extension has host permission here)

Embedding third-party iframe from b.test (attacker-controlled, extension does NOT have permission there):