3 ms·
what if we remove the JS, and just had the web browser echo a defined string back to the server? if this token uniquely identified the session, we could safely
by freeone3000 6y ago
what if we remove the JS, and just had the web browser echo a defined string back to the server? if this token uniquely identified the session, we could safely store the data server-side, with minimal leakage to other sites and no need for code execution at all!
- rank0 6y agoI can't tell if you're joking or not but this clearly already exists via HTTP headers.
- freeone3000 6y agoYes, including the echo, this is literally cookies.