Fix SecurityError in cross-origin context

[Zaczero]

Add fallback to window.location when window.top.location properties are inaccessible due to cross-origin restrictions.

E.g.

Uncaught SecurityError: Failed to read a named property 'origin' from 'Location': Blocked a frame with origin "..." from accessing a cross-origin frame.