CODEWITHSUNDEEP
javascriptreactjscookiesnext.jsweb-development-server
sebastianTheCoder
sebastianTheCoder

Reputation: 197

I can view httpOnly cookies in browser

I thought that httpOnly cookies were only available to read in a http request. However, when I open up Firefox dev tools, I can see the cookies' value. Is this normal?

Upvotes: 5

Views: 3925

Answers (2)

Sagor Mainul
Sagor Mainul

Reputation: 22

Yes, that’s normal.you can access the cookies using the devtool.

Upvotes: 0

CertainPerformance
CertainPerformance

Reputation: 371108

Yes, that's normal. What HttpOnly does is it prevents cookies from being accessible to JavaScript, which makes impossible to tamper with programatically (on the client). You can still access it manually through the browser's devtools. (If you weren't, it'd be quite difficult to debug issues with them, after all.)

Upvotes: 10

Related Questions