Added simple httponly bypass vector (PHP)