Compare event.source instead of passed href string

Some interactives have been embedded without a trailing slash which S3 kindly adds if there's an index.html. However, this will fail the href test. The change replaces that check with the event.source (aka the iframe's window) against the created iframe element's contentWindow.

The change also has the added benefit of removing the need to pass the href along with the data as a string.