From 3f71b219bbdb084383f1930d8d4b10980dcbeff8 Mon Sep 17 00:00:00 2001
From: Jeff Emmett <jeffemmett@gmail.com>
Date: Tue, 10 Mar 2026 19:41:34 -0700
Subject: [PATCH] fix(rflows): remove iframe sandbox restricting Transak widget

The sandbox attribute was blocking Transak's internal redirects,
causing T-INF-101 access denied errors. Transak needs full iframe
capabilities for its payment flow.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 modules/rflows/components/folk-flows-app.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/rflows/components/folk-flows-app.ts b/modules/rflows/components/folk-flows-app.ts
index 18841f5..2b2f877 100644
--- a/modules/rflows/components/folk-flows-app.ts
+++ b/modules/rflows/components/folk-flows-app.ts
@@ -3764,7 +3764,7 @@ class FolkFlowsApp extends HTMLElement {
 				<button id="onramp-close" style="position:absolute;top:8px;right:12px;z-index:10;
 					background:none;border:none;color:white;font-size:24px;cursor:pointer">&times;</button>
 				<iframe src="${url}" style="width:100%;height:100%;border:none"
-					allow="camera;microphone;payment" sandbox="allow-scripts allow-same-origin allow-popups allow-forms"></iframe>
+					allow="camera;microphone;payment"></iframe>
 			</div>`;
 
 		document.body.appendChild(modal);