Update cross-site-iframe.html

Switch frame to codereview.chromium.org to avoid X-Frame-Options.