HTTP Response Splitting Vulnerability on reddit.com 16 years agoalso, add httponly to your cookies then javascript cant see them 0ThreadHN