Step four: if this appeared in the iframe: pass.

Otherwise, fail.