Http only cookie

- If the HttpOnly flag (optional) is included in the HTTP response header, 
the cookie cannot be accessed through client side script (again if the 
browser supports this flag). 
- As a result, even if a cross-site scripting (XSS) flaw exists, and a user 
accidentally accesses a link that exploits this flaw, the browser (primarily 
Internet Explorer) will not reveal the cookie to a third party.

- If a browser does not support HttpOnly and a website attempts to set an HttpOnly cookie,
the HttpOnly flag will be ignored by the browser, thus creating a traditional, 
script accessible cookie. 
- As a result, the cookie (typically your session cookie) 
becomes vulnerable to theft of modification by malicious script. "Mitigating".

Source: owasp.org

Httponly

Set-Cookie: id=a3fWa; Expires=Wed, 21 Oct 2015 07:28:00 GMT; Secure; HttpOnly

Source: developer.mozilla.org

Similar codes

1 vote213 views2 answers
Append or Add to a Slice or Array in Go
Go
0 vote196 views1 answer
Flutter draw google map
Go
1 vote175 views2 answers
Login by google api
Go
0 vote195 views2 answers
Go Iterating over an array in Golang
Go
0 vote220 views1 answer
Flutter ListView goes infront of curved side Container
Go
8 votes219 views4 answers
Golang string split
Go
27 votes456 views4 answers
Updates were rejected because the tip of your current branch is behind
Go
7 votes210 views2 answers
What is go
Go
0 vote185 views1 answer
How to make sure that google colab runtime is not expired
Go
-1 vote196 views2 answers
Hugo Robots.txt template
Go