As part of our ongoing effort to improve communication with our developer community, we offer you the latest monthly roundup of the announcements, new features, and updates to Facebook Platform that occurred during November, 2009.
- Keep an eye on our developer roadmap and see the direction Facebook Platform is heading.
- We render images in stream attachments so that the maximum dimensions can be 90 pixels square. If you include more than one image in an attachment, or your story's description is longer than 300 characters, the user can see the rest of the content by clicking a "See more" link.
- We removed all reference to the video attachment type in stream stories. You should use the flash attachment type, since the flash type gives you more control over how your stories render.
- You can now find fans of a Facebook Page when you call pages.isFan without a session key. This lets you determine whether a user is a fan of a Facebook Page without the user needing to authorize your application.
- If you're developing IFrame canvas page applications or use the fb:iframe tag, we now pass the base domain to the IFrame. We also pass fb_sig_cookie_sig to IFrame canvas pages; store this signature in your cookies, as it's the signature used to sign the four fb_sig session variables: fb_sig_user, fb_sig_session_key, fb_sig_expires, and fb_sig_ss. Finally, we pass the session secret (in fb_sig_ss) to IFrames rendered with the fb:iframe tag.
- We no longer add a period to the end of a user's status in the status column of the user FQL table, making it consistent with the status FQL table and the behavior of the site.
- Learn how to make your software development practices more secure. This article details the security benefits of Facebook Platform's core components, the OWASP top ten vulnerabilities, secure development resources, and administrative practices to enhance site security.
Keep an eye on this blog, the Platform Live Status, and the weekly Push Changes articles for announcements, changes, and other important bulletins. You can subscribe to the blog's RSS feed and the Platform Live Status RSS feed, or subscribe to either or both via email.
As always, we appreciate your continued feedback in our Developer Forum -- let us know how we can reach and communicate with you even better.
Pete, the technical writer on the Platform team, likes keeping you up to date.