#r-development #httpOnly #xss "#cross-site scripting"