I was trying cookie stealing on a java and spring based web application.
Normally, a cookie can be obtained through <script>alert(document.cookie)</script>
,
but in the above code, cookie is not alerted.
Burpsuite and tamperdata tools are showing this cookie: jsessionid=XXXXXXX..XXX
Is there any way to catch cookies client-side through javascript?