Cross origin iframe with pointer-events: auto (blue)