Which browsers do support HttpOnly cookies, and since which version?
Please see http://www.codinghorror.com/blog/archives/001167.html for a discussion of HttpOnly co
OWASP have this documented. See http://www.owasp.org/index.php/HttpOnly