This page opens the attacker page as a popup so that window.close() is permitted on it (script-closeable browsing context).
window.close()