When you use cookies it is possible to set a attribute that say httponly. This means that client side Java script can't access the cookie. I was just wondering if it is possible to force the SA to set this attribute on all cookies it uses. Cheers Ole
... View more