[whatwg] cross-domain scrollIntoView on frames and iframes

[timeless]

sounds like a security nightmare.

we already have people complaining about reframing and spoofing and things.