facebook/facebook-php-sdk — pull request #122 by jimmykane (2013-11-24 14:51:31+00:00)
Title: Don't check against CSRF if there was no state (code) generated.

If in a signle handler you call the getCode twice, the function
logs that there was a Token mismatch at ERROR level. This is not
valid because the functions resets the state but forgets to check
against it.