Cross-site Request Forgery (CSRF)

facebook-sdk is vulnerable to cross-site request forgery CSRF. It does not support the state property in auth urls for CSRF detection, allowing CSRF attacks based on state mutation...