Skip to content

Glossary: Endpoint, Application and Email Security

HttpOnly

A cookie attribute that stops scripts in the page from reading the cookie, so an XSS attack can't steal the session cookie.

Where the book teaches it

Related terms

secure cookieSecureSameSiteXSS (cross-site scripting)