#shiny #cookie #httpOnly #security #xss