Tag: httponly
-
HttpOnly Session Cookies using ActiveRecordStore in Rails 2.2
If you're using CookieStore to manage sessions in your Ruby on Rails application, Rails 2.2 provides the great feature that you're now able to use HTTPOnly cookies. These are a great benefit because, for compatible web browsers, they dramatically reduce the risk of a Cross Site Scripting (XSS) attack being able to be used to …