Glossary: Security+ Exam Prep 3: Practice Exams

HttpOnly

Also written: cookie attributes

A cookie attribute that stops scripts in the page from reading the cookie, which blocks session theft through XSS. The Secure attribute only keeps a cookie off unencrypted connections.