facebook/facebook-php-sdk — pull request #134 by jimmykane (2013-12-20 20:27:19+00:00)
Title: If the state is null don't check for CSRF

When the state is not set or has done it's job (nullified) return false