[INVALID] Facebook widgets seem to have defeated ABE?

[jojojo]

My understanding of ABE, with the default facebook containment rule, is that it allows Facebook to run scripts only while you're on facebook.com. But recently I noticed this:



Why does this facebook element work? I thought this was exactly the kind of thing ABE is supposed to block. Have I misunderstood something or has Facebook and/or Seamlessweb managed to get around ABE?

[al_9x]

ABE is like a blacklist, allowing everything by default and requiring explicit denies to block something. There's a "Deny INC" missing from your rule.

[jojojo]

Thanks, don't know how that slipped through the cracks.