The frame below is sandboxed without allow-same-origin, giving it a unique opaque origin. The parent page's contentDocument access is blocked — the same condition as a real cross-origin frame — so the extension must use the iframe postMessage relay to find and click the target. This is the regression guard for the relay path: it must keep finding/clicking here even after the same-origin find is short-circuited.