Hi guys,

is it possible to access ASP.Net authentication cookie through
javascript ?

thanx

Kanfancoder,
A "Cookie is a Cookie is a Cookie". Since Javascript can read and write
cookies, the short answer is "yes, you can".
However - being able to decrypt an authentication cookie via client script
is another issue.
Peter

--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net




"Khafancoder" wrote:

> Hi guys,
>
> is it possible to access ASP.Net authentication cookie through
> javascript ?
>
> thanx
>
>

Thanks, but i heard abt HttpOnly cookies that aren't accessible
through JS, i want to know if asp.net uses these kind of cookies or
not !?

Khafancoder wrote:
> Thanks, but i heard abt HttpOnly cookies that aren't accessible
> through JS, i want to know if asp.net uses these kind of cookies or
> not !?
>

Most likely not. It's only supported by IE6+ and no other browsers as
far as I can tell. As it's not standard, any browser can choose to
ignore the cookie if you add the HttpOnly option.

--
Göran Andersson
_____
http://www.guffa.com

Thanks, very useful.

On Feb 4, 10:32 pm, Göran Andersson <g...@guffa.com> wrote:
> Khafancoder wrote:
> > Thanks, but i heard abt HttpOnly cookies that aren't accessible
> > through JS, i want to know if asp.net uses these kind of cookies or
> > not !?
>
> Most likely not. It's only supported by IE6+ and no other browsers as
> far as I can tell. As it's not standard, any browser can choose to
> ignore the cookie if you add the HttpOnly option.
>
> --
> Göran Andersson
> _____http://www.guffa.com