2 ms·Make sure any session/auth cookies are httpOnly too!by dbielik 9y agoMake sure any session/auth cookies are httpOnly too!