Security Tips Security Tip: What Is An HttpOnly Cookie? [Tip #86] Cookies come in many shapes and sizes, and with multiple attributes just to confuse you... Have you ever wondered what the humble HttpOnly attribute actually does?