Hacker News new | ask | show | jobs
by maldini94 1953 days ago
XSS attacks.

Also note that the cookies should be http only and with the secure flag