Attacker sibling frame A2 (same-origin, forged embedding_token)