Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.
Makes them unusable by injected JS.
Note: there may be some complications with this; talk to Matt Quail about Tomcat.
crowd.token_key cookie should be HttpOnly