News for hackers. Stuff that matters.

A comment on SPAs Are Dead?. Parent comment

Re:SPAs Are Dead? by timw4mail on Wednesday April 07, 2021 @04:01PM (#26730366)
So the article is about being unable to access third-party cookies due to browser privacy updates.

1. If you are using Http-only cookies, these are clearly unrelated. 2. If you are sharing an authentication token with the browser, cookie or not, it can be read by any scripts on the same origin.

So...what exactly are you trying to say?

[ Parent | on HN ]
Re:SPAs Are Dead? by midrus on Sunday April 11, 2021 @09:07AM (#26770092)
> If you are sharing an authentication token with the browser, cookie or not, it can be read by any scripts on the same origin.

No, it can't. Read about http-only cookies.

[ Parent | on HN ]