#http-only #xss #security #shiny #r-development