#shiny #cookies #httpOnly "#cross-site scripting"