Multiple choice technology security

Cookie value gets submitted during POST submit of HTML FORM

  1. True

  2. False

  3. May be

  4. Never
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Browsers automatically include cookies for the domain in HTTP requests, including POST form submissions. This is how session state is maintained - the session ID cookie travels with the form POST to the server, allowing the server to associate the submission with the authenticated session.

AI explanation

Browsers automatically attach a site's cookies to every request sent to that site's domain, regardless of HTTP method — so cookie values are included whether the form is submitted via GET or POST. This is exactly why session cookies work seamlessly across normal form submissions, and also why CSRF protections are needed for POST requests, since the browser will send the cookie even for a forged cross-site submission.

Keep practicing — related questions