The configuration community:
Search the Site:

session.cookie_httponly

Information

Marks the cookie as accessible only through the HTTP protocol. This means that the cookie won't be accessible by scripting languages such as JavaScript. This setting can effectively help to reduce identity theft through XSS attacks (although it is not supported by all browsers).

Syntax

Example

728x90