Https-Only: WebSocket exemption test in iframe