#http-only #xss #shiny-server "#cross-site scripting"