I'm looking as some web analytics solutions, I know it sounds paranoid.
I don't like the idea too much of just pasting scripts on my web-site that I don't know.
So I want to check if these scripts send to another server the session cookies of my website's users.
Some ways I though of are:
Use firebug to see all the requests made - the problem is that the script might encrypt the cookies in some way so I won't see the cookies as plaintext.
What do you think?
And will setting the session cookie to HttpOnly completely disable this?
Thanx in advance.