document.cookie has not all cookies
From XHR, I had one "Set-Cookie: .ASPXAUTH". It was really installed, as I saw that next XHR, had this cookie inside in request part. The strange is w开发者_JAVA百科hy document.cookie doesnot contain it?
HttpOnly is the answer, looks like in this area we have an old war.
精彩评论