Codepen such an online editing site, how to prevent xss, from being taken cookie by others?

Apr.11,2021

indeed, click on to pop up Alert, but if you execute Js, you may not necessarily get cookie, such as HTTP-only

.
Menu