Http only cookie

- If the HttpOnly flag (optional) is included in the HTTP response header, 
the cookie cannot be accessed through client side script (again if the 
browser supports this flag). 
- As a result, even if a cross-site scripting (XSS) flaw exists, and a user 
accidentally accesses a link that exploits this flaw, the browser (primarily 
Internet Explorer) will not reveal the cookie to a third party.

- If a browser does not support HttpOnly and a website attempts to set an HttpOnly cookie,
the HttpOnly flag will be ignored by the browser, thus creating a traditional, 
script accessible cookie. 
- As a result, the cookie (typically your session cookie) 
becomes vulnerable to theft of modification by malicious script. "Mitigating".

Source: owasp.org

Httponly

Set-Cookie: id=a3fWa; Expires=Wed, 21 Oct 2015 07:28:00 GMT; Secure; HttpOnly

Source: developer.mozilla.org

Similar codes

0 vote374 views1 answer
How to get your name at top of google search
Go
0 vote362 views2 answers
How to import docker mongo data to local mongodb
Go
5 votes400 views2 answers
Interface to string in golang
Go
0 vote381 views1 answer
Numbers in golang
Go
0 vote433 views1 answer
Golang return function
Go
2 votes381 views2 answers
Interface in go
Go
1 vote385 views1 answer
Go append array to array
Go
2 votes396 views1 answer
Sile logo wordpress programmatically
Go
3 votes354 views3 answers
What is google
Go
0 vote366 views1 answer
This release is not compliant with the Google Play 64-bit requirement The following APKs or App Bundles are available to 64-bit devices, but they only have 32-bit native code: 3. site:stackoverflow.com
Go