• JAX-RS and HTTPOnly flag in Cookies
  Anil's Security and Identity Management Blog | Planet JBoss Community
  in Programmierung > Webdevelop > Javascript with cookies httponly jboss security

httponly from all users