Once in the iframe, the iframe is run by you. Redirects should pass all the parameters to that page. You could also run Paypal from a different window.
Also, just to clarify, in a url string app params must be passed in in JSON format, ie appParams={"blablabla":"1234"} not param=value¶m2=value2 etc.
thanks,
Joel