Query about accessing HttpOnly Cookie & Secure cookie
问题 I am working on RESTful SPA app using angularJS. Currently initial REST call is setting a "token" cookie on xyz.com ( secured response cookie) after successful user login. I am not able to read this cookie in Javascript/angular as I am working on localhost. What I understood here , unless I run this app from xyz.com , i wont be able to access this cookie OR do I need a secured connection ? Is my Understanding correct ? Secondly, my understanding about "httponly" cookie is that , it wont be