Form protection + Facebook + Internet Explorer = nekde je tu zakopany asipes

Problem je ze netusim co ten asipes je

Mam stranku co ji potrebuji zobrazovat ve facebookovem prostredi a v ni mam formular ve kterem bych chtel mit zaplou CSRF protekci.

Vzal jsem piskoviste a upravil nasledujici

config.neon

common:

	php:
		date.timezone: Europe/Prague
		# session.save_path: "%tempDir%/sessions"
		# zlib.output_compression: yes


	nette:
		security:
			frames:

		session:
			autoStart: yes
			expiration: '+ 14 days'



production < common:

development < common:

HomepagePresenter.php

<?php

/**
 * Homepage presenter.
 *
 * @author     John Doe
 * @package    MyApplication
 */
class HomepagePresenter extends BasePresenter
{

	public function renderDefault()
	{
		$this->template->time = new DateTime;
	}


	public function createComponentCsrfForm()
	{
		$form = new NAppForm();
		$form->addProtection('CSRF Protection Error');

		// email
		$control = $form->addText('email', 'E-mail:')
			->setRequired();
		$control->setType('email')
			->addCondition(NForm::FILLED)
			->addRule(NForm::EMAIL, 'not valid email address');

		$form->addCheckbox('maillist', 'radio');

		$form->addSubmit('actionSend', 'send');

		$form->onSuccess[] = callback($this, 'saveUserToDb');

		return $form;
	}

	public function saveUserToDb($form)
	{
		print_r($form->getValues());
		exit('--OK--');
	}

}

a sablonu Homepage/default.latte

{* This is the welcome page, you can delete it *}

{block content}
<div id="banner">
	<h1>Facebook problem</h1>
</div>

<div id="content">
	{$time|date:'Y-m-d H:i:s'}
	{control csrfForm}
</div>

{/block}

Firefox , chrome neni problem … az na Internet Explorer (zkousel 7,9) ten mi proste vzdy hodi CSRF error

viz stranka co pak tohle cele zobrazuje

!!!POZOR nema to zaplou podporu pro HTTPS!!!

http://apps.facebook.com/drzhubuakrok/

netusite nekdo proc by se to melo chovat takhle divne ?