3 ms·
The only hole I can see here is that chrome extensions can read HTTP-only cookies. What are your thoughts on this?
by evantahler 12y ago
The only hole I can see here is that chrome extensions can read HTTP-only cookies. What are your thoughts on this?
- beagle3 12y agoFirst, some chrome extensions might legitimately need this. But even if they were disallowed - The guy had physical access to a running chrome capable of sending those cookies, and the ability to install an extension. This basically means no software policy was going to stop him.