Hacker News new | ask | show | jobs
by jsrozner 4 days ago
This. No cookies should be cross-site visible, ever, unless I explicitly choose for them to be.