[SOLVED] Disallowed Characters with Facebook Connect

[eluser]renownedmedia[/eluser]
I eventually gave up and set up my app as follows:

Canvas Callback URL: http://yourapp.com/entry.php
Connect URL: http://yourapp.com

And my entry.php file contains the following:

Code:

$data = json_encode($_GET);
setcookie("fb_sig", $data, time() + 10, "/");
header("Location: /");

Basically, a user can visit myapp.com and use the application, or it can be embedded using entry.php to grab the evil get data, JSON encode it and stick it into a cookie, which if needed could be JSON decoded and read later in the application. I think I ended up not needing the initial GET data it was sending me at all.