Cross-domain cookies and signed applet

StackOverflow https://stackoverflow.com/questions/10721962

Question

Can a signed Java applet manipulate cookies from other domains? (e.g., with JSObject)

Was it helpful?

Solution

A signed applet doesn't get elevated privileges in the browser so it won't be able to access the cookies. But it can read them from the disk if you know where to look.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top