You have to configure this in your Developer Console on facebook.
It's under Settings> App Domains
note that if you just do "www.example.com" - then you will need to make sure that the API request is coming from "www.example.com" - and not "example.com"