cookie

<p>big up TorontoJS <a href="https://www.youtube.com/channel/UC1samyyfqiKmOT6fq3uVO1A" rel="ugc">https://www.youtube.com/channel/UC1samyyfqiKmOT6fq3uVO1A</a></p> <p>Here's the poem, for the reading type.</p> <p>Fishy Sneaky Sticky Cookies can make even the greatest devs feel like rookies disguised as something so delicious hiding something oh so malicious</p> <p>do you ever wonder how that after googling for a cow you take look at the 'ol book they're trying to sell you steak knives now</p> <p>what is this black magic, I do say? what if, my friends, I told you today That it's all part of a cat &amp; mouse game and a Fishy Sneaky Sticky Cookie could be to blame</p> <p>__</p> <p>When I build my full stack app I do use cookies and they're not a trap! They help me know it's really you, so realYou2 doesn't have a clue</p> <p>often cookies store some state you'd hate to wait for a new token to create but there are good cookies, there are amen so you don't have to login all over again</p> <p>Some cookies are great but Some cookies are bait These are not the cookies you're lookin' for, mate</p> <p>--</p> <p>Almost every site that you visit will, one way or another leave cookies in chrome</p> <p>Some of these cookies look rather exquisite they look like they came from a long away from home</p> <p>I like go to foodnetwork.com. I'm a chef! but look at these cookies!!! WTF?? what are they doing?? what stew is stewing?? Could it maybe be me that they're screwing??</p> <p>I need to find out what the H.. or F.. they're about or else I'll be dreadfully mad and I'll yell.. i mean shout</p> <p>--</p> <p>You probably know what's the main cookie setter That's right.. it's the set-cookie header Ya you know me, it's HTTP when a server responds with a cookie it's better</p> <p>These are the cookies, easy to inspect from the network panel, right click and detect or in a browser extension's, onHeadersReceived that cookie information, it's a dream to retrieve</p> <p>There is, of course, another way though You bet your ass it's javascript yo, document.cookie = your shit you can't see these cookies come in bit by bit</p> <p>there is a restriction for this that you'll see the cookie's domain and site have to be the same document.cookie = EHH.. same origin policy</p> <p>that and cross origin resource sharing the browser's watching out for you, it's caring cookies won't be set where you did not intend to get but somehow these cookies just keep on appearing</p> <p>I didn't go to "gigya.com". it was foodnetwork bro, it must've came from the dom any guesses as to who we should blame? that's right folks... mr iframe</p> <p>iframes do the thing that is sneaky their domain is their own, getting around SOP a whole site inserted, the policy averted they bring their own javascript which can be really freaky</p> <p>and sometimes these iframes don't seem to do shit but they DO load another iframe just down a little bit and that's the culprit that's leaving these crumbs these are the ones that make me feel dumb</p> <p>so what's the big deal they're just cookies right? well if you work in advertising the cookies are tight these cookies are sticky, these cookies are icky they help advertisers sell you the perfect doohicky</p> <p>cookies get sent along with your requests so the advertisers can sell you more gorilla vests every site and every byte from page 1 and page 2 through these crazy iframe nests</p> <p>so what can we do of these nefarious things well we can blast them all, with all the destruction that brings or we can try to selectively remove but that's easier said than to prove</p> <p>remember that plenty of cookies are great we only want remove the ones that we hate</p> <p>cookies are kind of like bacteria.. you can pour anitbiotics into the system but it's an arms race eventually it makes that harder to resist 'em</p> <p>browser extensions have more apis to cut the browser's cookiestore down to size but there's no guarantee that you'll be totally free the best lesson here is to become more wise</p> <p>rememeber that when you are browsing the net it's not always gonna be a safe bet you have to be vigilent, do your due diligence our privacy's at stake, recognize the threat</p>

Convert cookies between Netscape cookies.txt and JSON — Cookie-Editor, Puppeteer, key-value, header. Format auto-detected. Free, runs entirely in your browser.

Auto delete cookies & site data on tab close. 100% local, open source, no tracking. Cookie AutoDelete alternative for Manifest V3. - thoopring/cookiemop

If you’re going to pay more than $5 for a single cookie, it should at least have some soul.