News for hackers. Stuff that matters.

A comment on Handling cookies is a minefield. Parent comment

Re:Handling cookies is a minefield by emn13 on Thursday November 21, 2024 @04:03PM (#42208632)
Yeah, that's what I meant. There's no built in support; but it's indirectly readable since client-side JS can read it.
[ Parent | on HN ]
Re:Handling cookies is a minefield by j16sdiz on Thursday November 21, 2024 @10:11PM (#42210794)
This miss the "HttpOnly" part, which prevents javascript (think script injection vulnerability) from touching this part of the storage
[ Parent | on HN ]