Best practice: HttpOnly
When setting cookies, could use of the 'HttpOnly' flag resolve this vulnerability? (In supporting browsers, at least?)
Posts by ewil
1 publicly visible post • joined 20 Sep 2011
Biting the hand that feeds IT
