Facebook App : This must be derived from Canvas URL, Secure Canvas URL

In my case the problem was I hadn’t completed the “+ Add Platform > Website” section. Once I did that the contents of App Domains became valid and the error went away.