fix(test/unit/iframe.xss.response.js): Change path to script

The injected script's (`iframe.xss.response.js`) path was incorrect
when using the `grunt connect:test_server` which was leading to failures
on the unit tests on travis.

ref: #913