A newly discovered attack technique, dubbed the "cookie sandwich," enables attackers to bypass the HttpOnly flag on certain servers, exposing…