1 comment

[ 3.3 ms ] story [ 25.4 ms ] thread
Make sure any session/auth cookies are httpOnly too!