#security #http-only #cookie #xss #r-shiny