loading...

Discussion on: Evil Session Tokens

rogercampos profile image
Roger Campos

What you say is true, the attacker will not have access to the cookies themselves. However there are trickier vector attacks he can perform, see for example

stackoverflow.com/questions/266969...