websec-paper interesting and helpful web security papers Welcome to submit Web Security Papers you found by the issue or pull request. XSS javascript get httpOnly cookies using http TRACE method. (Cross_Site_Tracing)