With changes to Facebook's privacy strategy, apps that want to use the Page Public Content Access feature need to be submitted for review by Facebook.

However...

While testing and before submitting for review, your app may only access content that is available on a Page that you, as an app admin, developer, or tester, administer.

Unfortunately, when attempting to access data from a page you own, the following error is returned:

(#10) To use 'Page Public Content Access', your use of this endpoint must be reviewed 
and approved by Facebook. To submit this 'Page Public Content Access' feature for review 
please read our documentation on reviewable features: 
https://developers.facebook.com/docs/apps/review.

This seems to be a know issue and Facebook may be working on a fix.

Werkzeug

CVE-2019-14806 Vulnerable versions: < 0.15.3 Patched version: 0.15.3 Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.

Jinja2

CVE-2020-28493 Vulnerable versions: < 2.11.3 Patched version: 2.11.3 This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDOS vulnerability of the regex is mainly due to the sub-pattern [a-zA-Z0-9.-]+.[a-zA-Z0-9.-]+ This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory.

CVE-2019-10906 Vulnerable versions: < 2.10.1 Patched version: 2.10.1 In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

Addresses issue #1.

Now shows a spinner while requesting the csv data. Once the app has the data creates a download link for saving the csv. Removed flask error template message update in favor of editing page with selectors. Server now returns csv data or json with error message.

For example... https://www.facebook.com/WashingtonStatePatrol/videos/vb.190565440958182/1814467131901330/?type=3&theater will crash the app if it's not configured for that page.

This is because we don't handle 400 Errors from the Facebook api.