Comments for Pretty Klicks | Web Design, Marketing and Business Blog

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Stefan

Stefan — Fri, 06 Jan 2012 23:05:09 +0000

I have now updated the blog post with a fix that should prevent XSS attacks, I used a jQuery method as we are using the jQuery library anyway. Thanks again to Rick!

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Stefan

Stefan — Fri, 06 Jan 2012 22:34:42 +0000

I have double checked and users who post on the specified facebook page wall also appear which does pose a risk. Looking into a solution to recommend users with. Any suggestions welcome to resolve this asap. Thanks again for raising this!

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Stefan

Stefan — Fri, 06 Jan 2012 22:06:08 +0000

Hi Rick, thanks for this, you are correct. However, this will only be a major issue in two circumstances. 1) If the feed is coming from a facebook page not within control of the user / website who is displaying the feed. or 2) The users facebook page is hacked. Thanks for raising this as educational purposes this is a classic and good example. We will be re-writing this tutorial soon anyway to incorporate the work around for getting the access token. Do you work in security?

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Rick

Rick — Fri, 06 Jan 2012 21:58:56 +0000

You have XSS vulnerabilities in your code sample, and now everyone has copied it. Oops.

So what happens if fb.message is a script tag and inside the script tags is some nasty javascript?

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Simon

Simon — Tue, 01 Nov 2011 03:54:39 +0000

Hey guys, I managed to integrate this quite nicely into my website by looking at your source code of your demo and tweaking it to work to my liking, except for one thing. Would any of you know how to integrate the time and date of the post as it shows on the facebook page too?

Thanks alot

Comment on Glasgow tweet up! by Marc Adam

Marc Adam — Thu, 13 Oct 2011 11:53:20 +0000

Is this happening again in 2011?

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Rob Butz

Rob Butz — Sun, 18 Sep 2011 11:58:47 +0000

I’m really looking forward to you updating the tutorial if it’s still in the cards. Also, I’d love to know how to parse out Graph field data from a Facebook page itself, such as “likes,” not just the feed. Thanks for providing this, though!

Comment on CSS3 Glow for inputs (like on twitter) by Malte

Malte — Fri, 02 Sep 2011 10:14:06 +0000

Thanks!

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by Austin

Austin — Sun, 28 Aug 2011 03:28:29 +0000

Hey Benji, I used your plugin and it’s awesome! Any way to add events as well?

Comment on How to make a Facebook feed using the Graph API, JSON and jQuery by admin

admin — Tue, 16 Aug 2011 12:24:31 +0000

Hi Andreas, Very busy in the studio at the moment. We will get on it ASAP.
Not a good idea copying and pasting our access_token. It’s insecure and also will expire.
Thats the access_token for the Pretty Klicks facebook app.

Thanks,
Stefan