How do HttpOnly cookies work with AJAX requests?
Yes, HTTP-Only cookies would be fine for this functionality. They will still be provided with the XmlHttpRequest’s request to the server. In the case of Stack Overflow, the cookies are automatically provided as part of the XmlHttpRequest request. I don’t know the implementation details of the Stack Overflow authentication provider, but that cookie data is … Read more