#http-only #xss #cookies #webdev #r-development