<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: fbml</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/fbml.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-10-02T14:39:44+00:00</updated><author><name>Simon Willison</name></author><entry><title>FB App Canvas Pages: I Think I'd Use IFrames</title><link href="https://simonwillison.net/2008/Oct/2/not/#atom-tag" rel="alternate"/><published>2008-10-02T14:39:44+00:00</published><updated>2008-10-02T14:39:44+00:00</updated><id>https://simonwillison.net/2008/Oct/2/not/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://www.ccheever.com/blog/?p=10"&gt;FB App Canvas Pages: I Think I&amp;#x27;d Use IFrames&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Facebook’s Charlie Cheever explains the difference between FBML canvas pages, iframe pages and XFBML when building Facebook apps. I’m always surprised at APIs that load untrusted content in an iframe, as it seems like an invitation for frame-busting phishing attacks.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/charlie-cheever"&gt;charlie-cheever&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/facebook"&gt;facebook&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/facebookapi"&gt;facebookapi&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/fbml"&gt;fbml&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/framebusting"&gt;framebusting&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/iframes"&gt;iframes&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/phishing"&gt;phishing&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/xfbml"&gt;xfbml&lt;/a&gt;&lt;/p&gt;



</summary><category term="charlie-cheever"/><category term="facebook"/><category term="facebookapi"/><category term="fbml"/><category term="framebusting"/><category term="iframes"/><category term="phishing"/><category term="security"/><category term="xfbml"/></entry><entry><title>Facebook Open Platform</title><link href="https://simonwillison.net/2008/Jun/3/facebook/#atom-tag" rel="alternate"/><published>2008-06-03T00:21:57+00:00</published><updated>2008-06-03T00:21:57+00:00</updated><id>https://simonwillison.net/2008/Jun/3/facebook/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://developers.facebook.com/fbopen/"&gt;Facebook Open Platform&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Facebook have open-sourced (under a modified MPL, does it still fit the OSI definition?) the code for the Facebook Platform, including their implementations of FBML, FQL and FBJS. This is no small release; the tarball weighs in at 40MB and includes libfbml, which depends on Firefox 2.0.0.4 for its HTML parser!


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/facebook"&gt;facebook&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/fbjs"&gt;fbjs&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/fbml"&gt;fbml&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/firefox"&gt;firefox&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/fql"&gt;fql&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/open-source"&gt;open-source&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/php"&gt;php&lt;/a&gt;&lt;/p&gt;



</summary><category term="facebook"/><category term="fbjs"/><category term="fbml"/><category term="firefox"/><category term="fql"/><category term="open-source"/><category term="php"/></entry></feed>