Title
Add HttpOnly flag to LiveJournal cookies
Short, concise description of the idea
Add the HttpOnly flag to LiveJournal cookies to help prevent against XSS.
Full description of the ideaThe only thing necessary is to set the HttpOnly flag on cookies sent by LiveJournal so that they cannot be accessed through client-side scripting. This makes
(
Read more... )
Comments 9
Reply
Reply
[edit: Mind you, I can confirm that for ljuniq, it doesn't seem to be using HttpOnly cookies. That one doesn't allow access to anything requiring security, though.]
Reply
Reply
Reply
Reply
Reply
Reply
Reply
Leave a comment