cookie

For fun, I was copying the “wordpress_logged_in_” cookie on one of my sites so I could manually set it in another browser and log in without going through the authentication step. While it worked, I noticed I could read the “wordpress_logged_in_” cookie from the Chrome developer tools but I could not read the cookie with JavaScript. It turns out this is because it is a HttpOnly cookie, which I got to learn about.