Multiple ChoiceHard 30s
httpOnly Cookies
An httpOnly cookie cannot be read by:
Options
- 1The browser, which reads the flag but still exposes the value
- 2The server, which sets HttpOnly but cannot enforce it client-side
- 3JavaScript (document.cookie), mitigating XSS token theft
- 4DevTools entirely, blocking the Applications tab from the cookie
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.