All of a sudden, country + lang parameters are being passed to external iframe urls in the canvas and, from what I can tell, they are breaking OAuth authentication.
This is BAD... it totally breaks our canvas page since we always verify the OAuth signature and throw an error when it doesn't verify, which is 100% of the time now that these new ...