#r-development #xss #http-only #cookie #security