#shiny "#cross-site scripting" #httpOnly #r-development