Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Does the checkmark at the Http column of Chrome devtool’s Cookie resource panel indicate a HttpOnly cookie?
I can’t find docs that confirm this, though I suspect it is the case. I am trying to verify my app is using HttpOnly for session cookies.
Yes. Enter
document.cookiein the console, and you’ll see that none of the checked cookies are visible.HTTP = HttpOnly flag, Secure = secure flag.