I\'m trying to set a Cookie in a XSS request using XMLHttpRequest.
I found the XMLHttpRequest Specification, and section 4.6.2-5 does seem to suggest that setting Co
https://developer.mozilla.org/En/Server-Side_Access_Control
allow you origin and also to set the Access-Control-Allow-Credentials HTTP header to true