Infinite reload on my canvas app with third party cookies disabled, but not on D4F canvas app

I've tried a few experimental things to get around third-party cookie issues over the years. I think the difference may be that drupalforfacebook.org has the "Use tokens in session to initialize javascript" option checked in admin/build/fb/settings.

Give that a try and if it doesn't make difference I will take another look at that site's settings.

Are you saying that http://apps.facebook.com/drupalforfacebook/ reloads infinitely when you connect to an account? You can do that by taking the tour. I just tried and it didn't infinitely reload for me.

Just looked things over again, trying to remember what I did...

Try settings $conf['session_inc'] in your settings.php, the same way I am on that site. Here's the end of my settings.php:

/**                                                                                                                 
 * Enable Drupal for Facebook                                                                                       
 */
// fb_session.inc hack to support canvas pages when third-party cookie disabled.                                    
$conf['session_inc'] = "profiles/custom/modules/fb/fb_session.inc";
// fb_url_rewrite.inc to support canvas pages when user has not authorized.                                         
include "profiles/custom/modules/fb/fb_url_rewrite.inc";
// fb_settings.inc to support canvas pages and tabs.                                                                
include "profiles/custom/modules/fb/fb_settings.inc";

$conf['fb_api_file'] = 'profiles/custom/libraries/facebook-php-sdk/src/facebook.php'; // Version 3.1.1              
                                                                                                                    
// Header so that IE will accept cookies on canvas pages.                                                           
if (!headers_sent()) {
  header('P3P: CP="We do not have a P3P policy."');
}

You probably need to replace "profiles/custom/modules/fb" with "sites/all/modules/fb".

Yeah, the problem is that modules/fb is changing the session id when you're on a canvas page. This what you want, as you should not see the same session in both your regular site (say www.example.com) and your facebook app (say apps.facebook.com/example). It uses a url rewriting trick to accomplish this. Without the url rewriting, modules/fb can't tell the request is intended for a canvas page instead of a regular page.

flag is using ajax instead of regular links to do whatever is is doing. And when making an ajax request, it is not respecting the url rewriting. I'm not sure how that module works. It might be a bug in that module. Or it might be that the HTML with the flag is cached (ie it is in a block which drupal caches) and it got cached from a regular page load not a canvas page.

At least that is my guess. Your page is loaded using module/fb canvas page session, and flag is trying to accomplish some ajax using the regular site session.

Which version exactly of Safari?

Where are you logging into the Drupal for Facebook app? I.e. what's the browser's URL? Are you clicking a connect button or just logging into facebook?

I just tried and couldn't make it happen there.

Hopefully theres a better solution than this patch. While this patch limits the reloading, there is another reload any time a link is followed. And session is not persisted from one request to another. That's basically what Safari is trying to do. I'm not sure how best to work around this.

The page height problem probably indicates an error in javascript. I'm not sure whether safari has something like firebug to help track that down.

Updated with better info