Translations:Manual:$wgCookieHttpOnly/10/en

Browsers that don't understand HttpOnly cookies should still store and use the cookie as normal, but will still expose them to JavaScript code.