What is httpOnly in HTTP header?

Cing Sian Dal
Mar 16, 2021

A data stored in HTTP header with httpOnly options will be stored only in the HTTP header.

For example, if you store cookies with httpOnly options, your cookies will be stored only in HTTP header. You cannot retrieved it with JavaScript API. You cannot check it by client side API. But your client can request to server with its header.

In server-side, you can retrieve cookie header with this request.

request.cookie

--

--

Cing Sian Dal

Don’t follow me. I wrote junks here. Follow me on Twitter instead.