davejohnson/phonegap-plugin-facebook-connect — Issue #105: security issue
Author: sagivo
Created: 2012-02-29 11:22:17+00:00
State: open

after calling FB.login() the response object contains app secret value under session object.
this is not safe since any sniffer can see this.