CVE-2026-20643 PoC

Tests whether NavigateEvent.canIntercept is incorrectly true for cross-port navigations.