Skip to main content
All Terms Glossary

HttpOnly Cookies

Definition

HttpOnly cookies are cookies that cannot be accessed through client-side JavaScript, providing protection against XSS attacks attempting to steal session tokens. This attribute ensures that even if an attacker manages to execute malicious scripts, they cannot directly access these cookies. It's a crucial security measure for session management and authentication.

Definition

What is HttpOnly Cookies?

HttpOnly cookies are cookies that cannot be accessed through client-side JavaScript, providing protection against XSS attacks attempting to steal session tokens. This attribute ensures that even if an attacker manages to execute malicious scripts, they cannot directly access these cookies. It's a crucial security measure for session management and authentication.

Definition

How does HttpOnly Cookies relate to client-side security?

HttpOnly Cookies is an important concept in client-side security that helps protect websites and web applications from various threats and vulnerabilities. HttpOnly cookies are cookies that cannot be accessed through client-side JavaScript, providing protection against XSS attacks attempting to steal session tokens. This attribute ensures that even if an attacker manages to execute malicious scripts, they cannot directly access these cookies. It's a crucial security measure for session management and authentication.

Got more questions

Talk to a security expert

We answer client-side security questions every day. Bring yours.

Book a demo