Cookie & Session

Same Origin Policy (SOP)

Cross-Site-Scripting(XSS)