Which browsers do support HttpOnly cookies?

security browser cookies xss httponly
knorv picture knorv · Feb 9, 2009 · Viewed 24.7k times · Source

Which browsers do support HttpOnly cookies, and since which version?

Please see http://www.codinghorror.com/blog/archives/001167.html for a discussion of HttpOnly cookies and XSS-prevention.

Answer

Michael Haren picture Michael Haren · Feb 9, 2009

Feel free to add to this list:

Related questions

Disable browser 'Save Password' functionality

One of the joys of working for a government healthcare agency is having to deal with all of the paranoia around dealing with PHI (Protected Health Information). Don't get me wrong, I'm all for doing everything possible to protect people's …

Read More
Finding All Insecure Content on a Secure Page

What's the most efficient way to find a list of all non-HTTPS URLs requested by an HTTPS page? If this kind of security violation happens, every browser alerts the user, but I can't find an easy way to find what …

Read More
Is JSON Hijacking still an issue in modern browsers?

I am using Backbone.js and the Tornado web server. The standard behavior for receiving collection data in Backbone is to send as a JSON Array. On the other hand, Tornado's standard behavior is to not allow JSON Array's due …

Read More