Security notice

• When the Facebook provider was configured to use the js_sdk method the login page could become vulnerable to an XSS attack.