Top "Httponly" questions

HttpOnly is a flag in the cookie header to hide data from JavaScript

ASP MVC 3 cookie losing HttpOnly and Secure flags

I am setting cookies as part of my mvc application: var cookie = new HttpCookie(CookieName, encryptedData) { Path = FormsAuthentication.FormsCookiePath, Domain = …

asp.net-mvc cookies https httponly
Using IIS Rewrite to add HttpOnly Flag To Cookies Not Working

I found numerous examples of adding the HttpOnly to my cookies but it does not work for me and I …

iis cookies rewrite httponly
how to set HttpOnly and Secure flag set in apache2.4.6 and tomcat

I have an apache2.4.6 and dotcms2.3.2 in suselinux. I want to set httponly and secure falg in dotcms and tomcat . …

apache security httponly
Cookie with HttpOnly flag for a angularJs application on Https protocol

I have a Angular Js application with uses https protocol for communication with server. I use cookie to store the …

angularjs cookies https httponly
How to configure for session cookie as http-only

to set http-only I used this in web.xml <session-config> <cookie-config> <http-only>true</…

session session-cookies httponly
Set httpOnly flag for CSRF token in Laravel

I'm building an application in Laravel 5.1 for a client. After I finished the application I got back an pentest report …

php csrf laravel-5.1 httponly
Add HttpOnly flag to cookies on the fly with Apache?

So I have a java webapp that uses tomcat with an apache proxy layer. I'm looking to make all cookies …

java apache tomcat httponly
Is session.cookie_secure in php.ini automatic?

Simple answer requested: If I put session.cookie_httponly=On session.cookie_secure=On in the php.ini file for …

php session cookies httponly
JSESSIONID HttpOnly in Weblogic 10.3

I am trying to set http-only flag for JSESSIONID in Weblogic 10.3 Apparently there was a parameter named cookie-http-only under session-descriptor …

java weblogic jsessionid httponly
can't access httponly cookie from react js but can access in postman app! how is it possible?

I send a request to server to login and get cookie with token value with HTTP only tag after this …

reactjs cookies httponly