From 7d5bf4c6b5f68416bf74bb57a45f2a7370b17cec Mon Sep 17 00:00:00 2001
From: Chris Beer <cabeer@stanford.edu>
Date: Wed, 16 Sep 2020 09:58:03 -0700
Subject: [PATCH] Make the access token iframe invisible

---
 src/components/AccessTokenSender.js | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/components/AccessTokenSender.js b/src/components/AccessTokenSender.js
index ef2a58f73..837d1a354 100644
--- a/src/components/AccessTokenSender.js
+++ b/src/components/AccessTokenSender.js
@@ -30,7 +30,13 @@ export class AccessTokenSender extends Component {
     */
     return (
       <IComCom
-        attributes={{ src: `${url}?origin=${window.origin}&messageId=${url}` }}
+        attributes={{
+          ariaHidden: true,
+          height: 1,
+          src: `${url}?origin=${window.origin}&messageId=${url}`,
+          style: { visibility: 'hidden' },
+          width: 1,
+        }}
         handleReceiveMessage={this.onReceiveAccessTokenMessage}
       />
     );
-- 
GitLab