Excerpt: "prevents script from reading the document.cookies DOM attribute." http://www.whatwg.org/specs/web-apps/current-work/#sandboxed-origin-browsing-context-flag Should this be |document.cookie| instead of document.cookies? Garrett