digg

Facebook Connect Join Digg About

The FF2 extension everyone should be using

blog.php-security.org — Stefan Esser of the Hardened-PHP Project has written an extension that enables httpOnly support for cookies in Firefox 2. An httpOnly cookie is a cookie that cannot be read from a client side script, thereby preventing cookie stealing.

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

3 Comments

show profanity settings
expand all
  • Rickard, on 10/12/2007, -0/+1And by the way, this isn't blog spam. It's a link to the developer's own blog announcing the extension.
  • dioxmat, on 10/12/2007, -0/+1"An httpOnly cookie is a cookie that cannot be read from a client side script, thereby preventing cookie stealing." This is not 100% true, there are ways to go around that limitation. In fact, it's one of the reasons why it's not included in Firefox, read the bug :
    http://bugzilla.mozilla.org/show_bug.cgi?id=178993

    BTW, this extension is at the proof-of-concept-hack stage.
  • DaReJa, on 10/12/2007, -0/+0Looks Great!!

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...

© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.