Relates :
|
|
Relates :
|
The HttpOnly attribute for cookies is not part of RFC 2965 but is widely used because it provides a extra level of security. When a cookie is flagged 'HttpOnly' it means that cookie should not be accessible through scripting but only sent as part of a HTTP request.
|