
What security features does Facebook have in place to help me protect my apps from attacks?
We have the following security features to protect your app from potential security attacks:
- OAuth 2.0: We use OAuth 2.0 for authentication and authorization. We support a number of flows so that you can authenticate users in Web applications via redirects, in JavaScript, or in desktop and mobile applications. Read more about OAuth here.
- FBML: Facebook Markup Language (FBML) enables you to build full Facebook Platform apps that deeply integrate into a user's Facebook experience. You can hook into several Facebook integration points, including the profile (timeline), Facebook canvas, News Feed and Wall. FBML is an evolved subset of HTML with some dangerous elements removed, and others which have been added that are specific to Facebook.