Question

141

Can't access cookies from document.cookie in JS, but browser shows cookies exist

rated 0 times [ 144] [ 3] / answers: 1 / hits: 96110 / 11 Years ago, sat, july 6, 2013, 12:00:00

I can't access any cookie from JavaScript. I need to read some value and send them via JSON for my custom checks.

I've tried to access cookies from JS, like it was described at:

http://www.w3schools.com/js/js_cookies.asp

Get cookie by name

As you can see at the code, it's seen as clear as a crystal the next:

var c_value = document.cookie;

When I'm trying to access the document.cookie value from the Chrome's web-debugger, I see only the empty string at the Watch expressions:

So I can't read cookies value, which I need.

I've checked the cookie name, which I'm sending to get an associated value IS correct.
Also, I'm using the W3Schools source code for getting cookies, if you're interested (but from the 2nd link, the technique is similar).

How can I fix my issue?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

lailab

Add To Favorites

Follow

Total Points: 706

Total Questions: 102

Total Answers: 95

Location: Falkland Islands

Member since Mon, Jul 13, 2020

4 Years ago

answered 11 Years ago havenbilliec · Accepted Answer

You are most likely dealing with httponly cookies. httponly is a flag you can set on cookies meaning they can not be accessed by JavaScript. This is to prevent malicious scripts stealing cookies with sensitive data or even entire sessions.

So you either have to disable the httponly flag or you need to find another way to get the data to your javascript.

By looking at your code it should be easy to disable the http only flag:

Response.AddHeader(Set-Cookie, CookieName=CookieValue; path=/;);

Response.SetCookie(new HttpCookie(session-id) { Value = Guid.NewGuid().ToString(), HttpOnly = false });

Response.SetCookie(new HttpCookie(user-name) { Value = data.Login, HttpOnly = false });

Now you should be able to access the cookie information from JavaScript. However I don't know exactly what kind of data you are trying to get so maybe you can go for another approach instead and for example render some data attribute on the page with the information you need instead of trying to read the cookie:

<div id=example data-info=whatever data you are trying to retrieve></div>

console.log(document.getElementById('example').getAttribute('data-info'));