For i-frames, we need to consider the top level cross-origin parent for https://w3c.github.io/webauthn/#dom-collectedclientdata-toporigin
<rdar://problem/117711116>