Is it possible to prevent cookies to be sent in every HTTP request?

后端 未结 3 1929
轻奢々
轻奢々 2021-02-07 12:05

I recently found (here: Does every web request send the browser cookies?) that every HTTP request contains the cookies related to a domain every time a request is made to that s

3条回答
  •  死守一世寂寞
    2021-02-07 12:42

    Browsers

    Is not possible to prevent browser to send cookies.

    This is why is generally it is recommended (Yahoo developer Best practice, see section Use Cookie-free Domains for Components) to serve static content like css, images, from a different domain that is cookie free.

    When the browser makes a request for a static image and sends cookies together with the request, the server doesn't have any use for those cookies. So they only create network traffic for no good reason. You should make sure static components are requested with cookie-free requests. Create a subdomain and host all your static components there.


    Programmatically

    From any programming language, instead, you can choose if you like to send cookies or not.

    Cookie management is done by the programmer, because libraries are written to make single requests.

    So if you make a first request that return cookies, you need to explicit read them, hold them locally somewhere, and eventually put them in a second request to the same server if you need.

    So from NodeJS if you don't explicitly add cookies in your requests the http call doesn't hold them.

提交回复
热议问题