Why CSRF token cookies don't need to be httpOnly
July 20, 2024
CSRF token cookies are typically sent without httpOnly set to true. But is that a secure practice?
2 posts found
CSRF token cookies are typically sent without httpOnly set to true. But is that a secure practice?
Learn how to use built-in tools in NodeJS to store user passwords securely.