Glossary: Endpoint and Application Security

HttpOnly

Also written: SESSION_COOKIE_HTTPONLY

A cookie flag that stops JavaScript in the page from reading the cookie, so an XSS script can't steal it.