2008-12-19 Helping Protect Cookies with HTTPOnly Flag http://blog.modsecurity.org/2008/12/helping-protect-cookies-with-httponly-flag.html