Fix bugs for navigating subframe RenderViewHosts.