Translations:Manual:$wgCookieHttpOnly/15/en

Brion's blog post on the topic