News for hackers. Stuff that matters.

A comment on Stop using JWT for sessions (2016). Parent comment

Re:Stop using JWT for sessions (2016) by nbevans on Thursday November 01, 2018 @10:42AM (#18354305)
You can't access a cookie from JavaScript if it is marked with the HttpOnly flag.
[ Parent | on HN ]

There are no comments on this comment yet.