a8f6024234
Replaced broken srcdoc iframe approach with direct script injection so the TFL syndicate.js runs in page context with access to the DOM it needs. Also added truthforlife.org and ajax.googleapis.com to CSP script-src, which was silently blocking the widget and its jQuery dependency. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>