What is Secure Cookie?

A secure Cookie, additionally known as httpOnly cookie, is a type of cookie that simplest works with HTTP/HTTPS and does not paintings for Scripting Languages like JavaScript. Since it's miles simplest utilized in storing inFormation and used for Hypertext Switch Protocol requests and information over the Internet, Exploits and Hacks made through scripting are not able to Access them. So a steady cookie’s fundamental gain is that it can forestall theft thru pass-Web Page scripting (XSS).

What Does Secure Cookie Mean?

A steady cookie usually has the steady Attribute activated, so it's miles used frequently through HTTPS and securely transmitted with encrypted connections. The httpOnly Flag inside the sTable cookie Header guarantees that JavaScript or any non-HTTP strategies cannot get entry to the cookie. The cookie works through the assistance of two headers: set-cookie and cookie. The process of the set-cookie header is to create a secured cookie at the user’s sySTEM in reaction to a http request. While the cookie header is part of the Software with an http request desPatched to the Server to validate if there is a steady cookie that matches the area and path asked.

The secure attribute and httpOnly fLag paintings collectively to ensure that the browser is able to restriction get entry to to the secure cookie statistics from malicious Scripts which can have infected the browser or the Network. This mitigates some of the damages that many XSS Attacks can cause, especially those that target cookies.