0

in guest page

<script>
console.log(document.cookie)
// ""
</script>

But in Developer Tools` Application Cookies has values.

xiaoyang
  • 81
  • 3
  • 1
    Are the cookies set as HttpOnly cookies? (You should see this in the Developer Tools.) If so, they are only sent with http requests to the server and are inaccessible via JS (this adds an extra layer of security, and can be used to protect session cookies and the likes). – Bets Feb 01 '23 at 12:19
  • I sure not cookies set as HttpOnly cookies – xiaoyang Feb 01 '23 at 14:43

0 Answers0