—
lab_session is httpOnly and will not appear here — but AiTM proxies can still observe it on the wire when TLS is terminated at the proxy.
lab_session