From b6dfc6f903974a7e8dcab37db082ced1082e0211 Mon Sep 17 00:00:00 2001
From: Daniel Salazar <daniel.salazar@puter.com>
Date: Wed, 7 Oct 2026 23:11:49 -0700
Subject: [PATCH] fix: harden card verification (#4126)

---
 src/gui/src/UI/UIWindow.js | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/gui/src/UI/UIWindow.js b/src/gui/src/UI/UIWindow.js
index e95f2b30d..214c8c370 100644
--- a/src/gui/src/UI/UIWindow.js
+++ b/src/gui/src/UI/UIWindow.js
@@ -1322,8 +1322,11 @@ async function UIWindow (options) {
     // set iframe url
     if ( options.iframe_url ) {
         $(el_window_app_iframe).attr('src', options.iframe_url);
-        //bring focus to iframe
-        el_window_app_iframe.contentWindow.focus();
+        // Not for a hidden window: focusing a display:none iframe still takes
+        // the keyboard from whatever had it. Showing it later focuses it.
+        if ( options.is_visible ) {
+            el_window_app_iframe.contentWindow.focus();
+        }
     }
     // set the position of window
     if ( ! options.is_maximized ) {