This same-site popup keeps the attacker renderer process alive after the main tab navigates cross-site, so the leaked MediaStreamDispatcherHost remote stays connected.