4 ms·
It’s also not possible for them to read the cookies of other domains without those domains setting cookie access control that explicitly allows it.
by kortilla 3y ago
It’s also not possible for them to read the cookies of other domains without those domains setting cookie access control that explicitly allows it.
- defrost 3y agoThat's something I 'knew' in theory .. but as I'm back end numerical geophysics coder that avoids web UI as much as possible I frequently lag on the latest sneaky end runs in practice. Nice to know that this is still the case - but always worth checking.
- kortilla 3y agoYeah, the security of the web depends on it so it’s unlikely to ever change. Your session tokens that give you access to a website after you’ve logged in are stored in those cookies. If another site could read them, they could use them to access your email, etc.