2 ms·

How would they steal HTTP-only cookies this way?

• minitech 6y ago
  They wouldn’t steal the cookie, they’d just have the script send the requests as the user directly.