const cookieParser = require("cookie-parser")
app.use(cookieParser())
app.post('/msg',function(req,res){
    // 直接在客服端 控制台创建cookie 也能访问
    // 服务器端获取cookie
    console.log("读取cookie:",req.cookies);
    res.send(req.cookies)
})

// 服务端设置cookie
  // XSS跨站脚本攻击
    res.cookie("weight","75kg",{
        expires:new Date(Date.now()+10000),
        httpOnly:true
    })
    res.send("设置成功")