Stealing HttpOnly cookies with the cookie sandwich technique (via gabeio) — discussion
#security #web
