0

in guest page

<script>
console.log(document.cookie)
// ""
</script>

But in Developer Tools` Application Cookies has values.

2
  • 1
    Are the cookies set as HttpOnly cookies? (You should see this in the Developer Tools.) If so, they are only sent with http requests to the server and are inaccessible via JS (this adds an extra layer of security, and can be used to protect session cookies and the likes).
    – Bets
    Commented Feb 1, 2023 at 12:19
  • I sure not cookies set as HttpOnly cookies
    – xiaoyang
    Commented Feb 1, 2023 at 14:43

0

Browse other questions tagged or ask your own question.