_Response_Cookie.HttpOnly (gb.web)

Property HttpOnly As Boolean

Return or set if the cookie is only visible to HTTP requests (and not Javascript code).