Comment Comment by plugin-baby Great write-up!Why isn’t the PHPSESSID cookie HttpOnly?And why if the XSS was already known had they not fixed it?! parent plugin-baby 2 years ago
Why isn’t the PHPSESSID cookie HttpOnly?
And why if the XSS was already known had they not fixed it?!