#shiny #xss #httpOnly #cookie #dev