Report question

Question: Setting httponly in JSESSIONID cookie (Java EE 5)