CODEWITHSUNDEEP
cookiesxss
Vu Nguyen
Vu Nguyen

Reputation: 543

Reading cookies from other Domains

I have heard of people being able to access other sites cookies using XSS. Is this is a legitimate option and how do you achieve this?

Upvotes: 2

Views: 428

Answers (2)

fizban
fizban

Reputation: 597

It's definitely not a legitimate option. It's considered a security hole anywhere it exists, and if you rely on it in your application, it will fail when those holes are fixed.

Upvotes: 2

egrunin
egrunin

Reputation: 25063

It's not a legitimate option, and will probably get you flagged as malware.

If you're trying to do something useful (i.e. non-evil), there's probably a legitimate way of doing it.

Upvotes: 5

Related Questions