From: Bertold Kolics <Bertold.Kolics_at_Sun.COM>
Date: Wed, 23 Jul 2008 11:53:07 -0500

Hi,

Would it be possible to add support for HTTP-only cookies in the
Cookie/NewCookie classes (see http://www.owasp.org/index.php/HTTPOnly)?
I understand that this extension is non-standard and does not give full
protection against XSS - but it should be trivial to implement.

Bertold