tags:

views:

111

answers:

1
Q: 

document.cookie has not all cookies

From XHR, I had one "Set-Cookie: .ASPXAUTH". It was really installed, as I saw that next XHR, had this cookie inside in request part. The strange is why document.cookie doesnot contain it?

A: 

HttpOnly is the answer, looks like in this area we have an old war.

dynback.com  2010-01-04 12:52:47
This is a security feature to protect cookie data against attacks like XSS.
Gumbo  2010-01-04 13:02:29

related questions

Is there a way to clear a user's brower of my page, or say not to use cache?
Displaying the current authenticated Sharepoint user from an asp.net Page Viewer Web Part
Tools for converting from ASP to ASP.NET?
XML based website - how to create?
IIS ASP Caching
"Expires" in http header for static content? how-to
Asp XML Parsing
Checking if another web server is listening from asp
Membership bulk email software
Customizing Search Results Display in Sharepoint Services 3.0 Wiki
What to put in a session variable
Looking for ways to automate web site testing
python cgi on IIS
asp consuming a web service, what do do with recordset object ?
Asp.net path compaction
How to compress JPEG images with ASP on Windows CE
Best practices for refactoring classic ASP?
What's the best way to manage a classic asp front-end using Visual Studio 2008?
IIS 6/COM+ hangs
Printers not available unless shared.
Calling REST web services from a classic asp page
Creating iCal Files in c#
Best references for secure coding practices in ASP.NET and classic ASP.
LinqDataSource - Can you limit the amount of records returned?
ASP, need to use SFTP