console.log('test.html: ' + window.origin);
const scriptEscape = document.createElement('script'); 
scriptEscape.textContent = 'alert(1);'; 
window.parent.document.body.append(scriptEscape);