In more mature versions of numerous browsers, there had been safety holes during the implementation from the XMLHttpRequest API. This API allows pages to specify a proxy server that would get the reply, and this proxy https://vpnpitbull.com/tech/what-are-cookies/