Http only cookie

- If the HttpOnly flag (optional) is included in the HTTP response header, 
the cookie cannot be accessed through client side script (again if the 
browser supports this flag). 
- As a result, even if a cross-site scripting (XSS) flaw exists, and a user 
accidentally accesses a link that exploits this flaw, the browser (primarily 
Internet Explorer) will not reveal the cookie to a third party.

- If a browser does not support HttpOnly and a website attempts to set an HttpOnly cookie,
the HttpOnly flag will be ignored by the browser, thus creating a traditional, 
script accessible cookie. 
- As a result, the cookie (typically your session cookie) 
becomes vulnerable to theft of modification by malicious script. "Mitigating".

Source: owasp.org

Httponly

Set-Cookie: id=a3fWa; Expires=Wed, 21 Oct 2015 07:28:00 GMT; Secure; HttpOnly

Source: developer.mozilla.org

Similar codes

0 vote247 views1 answer
Find options mongo golang order by field
Go
0 vote260 views1 answer
Go ipfs
Go
0 vote282 views1 answer
{google:baseURL}search?q=%s&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:iOSSearchLanguage}{google:searchClient}{google:sourceId}{google:contextualSearchVersion}ie={inputEncod
Go
0 vote242 views1 answer
Run a go app
Go
0 vote279 views1 answer
Golang Excel
Go
2 votes290 views1 answer
Custom middleware echo golang authentication
Go
1 vote272 views1 answer
Golang backward loop
Go
0 vote253 views1 answer
I got a really nice cable and a set of keycaps more mthis keyboard, sssssssdasdfasddddxx bbbsdfbsdfbsdfbsdf
Go
4 votes266 views1 answer
Mongo db show datbae
Go
0 vote254 views1 answer
Make image go to center of page
Go