how does the browser differentiate a cookie is from client-side created (JavaScript) or server-side created (ASP.NET). Is it possible to delete cookie created from server side in client side and vice versa, I’m struggling to delete a cookie was created from client-side using javascript in ASP.NET code-behind.
how does the browser differentiate a cookie is from client-side created (JavaScript) or server-side
Share
It doesn’t. A cookie is a cookie.
The closest it comes is the HTTP Only flag, which allows a cookie to be hidden from JavaScript. (This provides a little defence against XSS cookie theft).
Yes. A cookie is a cookie. (Again, client side code can’t touch an HTTP only cookie)