favicons in tab drop down list are not first-party isolated

gk noticed that the ESR52-based first-party isolation is not yet working with the tab dropdown list. See legacy/trac#16983 (moved) for our old fix.