Skip to content

Glossary: Threat Vectors: Files, Networks and Endpoints

HttpOnly

A cookie setting that stops page scripts from reading the cookie, so injected JavaScript cannot copy the session token.

Where the book teaches it

Related terms

cookieSecure (cookie attribute)SameSiteSet-Cookie