1 comment

[ 4.9 ms ] story [ 14.7 ms ] thread
Make sure any session/auth cookies are httpOnly too!