Which browsers do support HttpOnly cookies?

Question

Which browsers do support HttpOnly cookies, and since which version?

Please see http://www.codinghorror.com/blog/archives/001167.html for a discussion of HttpOnly co

Answer 1

All major browsers support HttpOnly.

• Microsoft IE 5.0+
• Mozilla Firefox 1.0+
• Google Chrome
• Apple Safari
• Opera 8.0+

Answer 2

Up to date results can be found here:

http://www.browserscope.org/?category=security

(linked from the OWASP article mentioned above)

Answer 3

None of the links above offer a real compatibility table (OWASP page seems broken). Here is the link of :

Cookie (and HttpOnly) browser compatibility table from Mozilla

Answer 4

Feel free to add to this list:

• Internet Explorer since 6 sp1 (source, source)
• Firefox since 2.0.0.5 (source)
• Opera since 9.5 (possibly earlier) (source)
• Safari since 4 (source)
• Chrome since 1.0.154 (source)

Answer 5

OWASP have this documented. See http://www.owasp.org/index.php/HttpOnly