There are lots of effective mechanisms to prevent the stealing of cookies. If you have a client-side-only site, probably best to use local storage instead. Ot

There are lots of effective mechanisms to prevent the stealing of cookies. If you have a client-side-only site, probably best to use local storage instead. Otherwise, marking them as HTTP-only and secure-only should be sufficient.