목록httpOnly (1)

Gentle Breeze

[보안] httpOnly Cookie

The HttpOnly cookie is supported by most modern browsers. On a supported browser, an HttpOnly session cookie will be used only when transmitting HTTP (or HTTPS) requests, thus restricting access from other, non-HTTP APIs (such as JavaScript). This restriction mitigates but does not eliminate the threat of session cookie theft via cross-site scripting (XSS). This feature applies only to session-m..
⑨ 직무역량강화/기타 2012. 1. 11. 10:11
Prev 1 Next