7 ms·A cookie is susceptible to both xss and CSRF. You ought to be protecting against xss anyway.by moi2388 7mo agoA cookie is susceptible to both xss and CSRF. You ought to be protecting against xss anyway.