Does https connection secure cookies and prevents XSS attacks. I have a simple blog that allows users to enter JavaScript code as an input. I want to allow Javascript input by the user while still preventing XSS attacks and cookie stealing. Does https help secure cookies. I only found few sites that talks about this and still a bit unclear.
5 Answers
You can use a Web Application Firewall to scan and block XSS, including in cookies though the latter can cause false positives https://medium.com/p/5d4b1d33219a/edit
Related