Compare event.source instead of passed href string

Some interactives have been embedded without a trailing slash which S3 will kindly adds if there's an index.html. However, this will fail the href test. This change replaces that check with the event.source (aka the iframe's window) against the created iframe element's contentWindow.

The change has the added benefit of removing the need to pass the href along with the data as a string.