4 ms·
And then a malicious/compromised plugin has access to your primary sites cookies. I think that’d be worse for SEO.
by vermilingua 3y ago
And then a malicious/compromised plugin has access to your primary sites cookies. I think that’d be worse for SEO.
- jansommer 3y agoCouldn't one set the path of cookies to be for your app? Then a malicious plugin shouldn't be able to read your apps cookies, since they won't be sent to Wordpress
- danielheath 3y agoMost web frameworks use encrypted cookie storage by now, right? Without the server key those cookies are useless.
- sznio 3y agoNot if someone takes the cookie and just passes it back to the app from their own browser to steal someone's authentication.