å æ¥ã»ãã·ã§ã³ã«ã¾ã¤ããè¨èã«ã¤ãã¦ã¾ã¨ãã¾ãããããµã¨è¡¨é¡ã®ä»¶ãç解ãææ§ã ãªã¨æ°ã«ãªã£ãã®ã§èª¿ã¹ã¦ã¿ã¾ããã HTTP Onlyå±æ§ã¨ã¯ cookie ã®ã¹ã³ã¼ã(åç §ã»æä½ã®æ¨©é)ã HTTP ãªã¯ã¨ã¹ãã«å¶éãããã® Cookieã®Secureå±æ§/HttpOnlyå±æ§ã®ææã¨ä¿®æ£æ¹æ³ã¨èå¼±æ§ã®è§£èª¬ ãã®ãHTTPãªã¯ã¨ã¹ããã¨ããè¨èãå¼ã£ããã£ã¦ãSecureå±æ§ã¨ä½ãéãã®ï¼ð¤ãã¨ãªã£ã¦ããã®ã§ãããããã§ããHTTPãªã¯ã¨ã¹ãã¯ã¹ã¯ãªããã«ãããªã¯ã¨ã¹ã(XMLHttpRequest)ã«å¯¾ããè¨èãhttp or httpsã¯é¢ä¿ããã¾ããã ã¤ã¾ããHTTP Onlyå±æ§ã¯ã¹ã¯ãªããããCookieã¸ã®ã¢ã¯ã»ã¹ãç¦æ¢ãã¦ãããå±æ§ã ãã£ã¨å ·ä½çã«ã¯XSSèå¼±æ§ããã£ãéãCookieã®çã¿åºããäºé²ãã¦ããããã®(ãã ãããªã¹ã¯ã®ä½æ¸ã«ã¯å½¹ç«ã¤ãã®ã®ãå®å ¨ã«é²è¡ã§ãã
{{#tags}}- {{label}}
{{/tags}}