Hacker News new | ask | show | jobs
by donatj 697 days ago
Eh, a cookie set with JavaScript can't be HttpOnly. It also requires JavaScript. None of this is ideal.