The effect of HttpOnly on XSS attacks

1. Recently in the Python flask framework to write things, by the way the role of HttpOnly to come out, mainly to prevent XSS vulnerability attacks.

The following hello.py are written in flask.

2. Add two cookie values to the code, one with the httponly tag and one without the httponly tag.

Index.html is a simple XSS test JS code

 
 

The effect of HttpOnly on XSS attacks