Open kellpossible opened 10 months ago
It seems like the api key which is bound to the referrer isn't working in facebook browser, perhaps the facebook browser is not providing the correct referrer?
If this is true, it effectively means that their referrer based authentication is completely useless. It's already insecure because people can spoof the header if they want.
I have no idea why...