Table 4 – Build, Compilation, Implementation, Testing, and Documentation
Prevention and Mitigation Practices CWE
This is not a complete solution, since HttpOnly is not supported by all browsers. More
importantly, XMLHTTPRequest and other powerful browser technologies provide read