Cookies are, without a doubt, the worst "API" in the DOM. Here's the *entire* AP... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

billyhoffman on May 5, 2015 | parent | context | favorite | on: CSRF protection bypass due to Google analytics and...

Cookies are, without a doubt, the worst "API" in the DOM. Here's the entire API: document.cookie

That's it. That one property.To add cookies, modified cookies, delete cookies, whatever, you do an assignment. To read all the cookies, you do a read.

That's it. That's the API.

sarciszewski on May 5, 2015 [–]

This is correct, and it's a source of madness.

One more thing: Cookies are limited to 4KB total due to the HTTP/1.1 specification.

Consider applying for YC's W25 batch! Applications are open till Nov 12.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact