Re: [XMLHttpRequest-tests][eventsource-tests][websockets-tests] Set httponly for cookies to enhance security (#1082)

This may break a current or future use of those resource files. We may have or want to write tests that use JavaScript to read cookies. Also, these cookies are not security-sensitive - they are merely set for testing - so there's no gain in making them httponly.

Feel free to add a separate resource file dedicated to testing httponly cookies if you need this!

View on GitHub: https://github.com/w3c/web-platform-tests/pull/1082#issuecomment-47521470

Received on Monday, 30 June 2014 11:36:11 UTC