https://mamchenkov.net/wordpress/2016/07/16/facebook-security-policies-wtf/