Replace dashes with appropriate characters
This commit is contained in:
@@ -10,7 +10,7 @@ import (
|
||||
// tokenCookie remembers a caller's token so it does not have to be pasted for
|
||||
// every upload.
|
||||
//
|
||||
// It is HttpOnly, so a script on this origin cannot read it back — which is the
|
||||
// It is HttpOnly, so a script on this origin cannot read it back, which is the
|
||||
// reason to prefer it over localStorage, where any injected script could
|
||||
// exfiltrate the credential. The page never needs to see the value: the server
|
||||
// resolves it and renders who the caller is.
|
||||
|
||||
Reference in New Issue
Block a user