Why doesn't the document.cookie method display all cookies?

Question

JavaScript

When I click on "learn more information about this site" it shows 2 in the cookie files.



But if I type the document.cookie method in the console, it only displays 1.



How does it work? As I understand it, it is possible to hide certain cookies so that they cannot be obtained from the console? And where is it written?

There is no mention of this anywhere on the internet.

Answer 1

Secure ("safe") and HttpOnly cookies
"Secure" (secure) cookies are sent to the server only if the request is made over SSL and HTTPS. However, sensitive data should never be transmitted or stored in cookies, since the mechanism itself is very vulnerable to security, and the secure flag does not provide any additional encryption or security features. Starting with Chrome 52 and Firefox 52, insecure sites (http:) cannot set cookies with the secure flag.
HTTPonly cookies are not accessible from JavaScript via the Document.cookie API properties, which helps avoid cross-site scripting ( XSS). Set this flag for cookies that do not need to be accessed via JavaScript. In particular, if cookies are used only to maintain the session, then JavaScript does not need them, so the HttpOnly flag should be set in this case.