cfwheels/cfwheels — comment on commit 2289bcf1dc359eda3d391891712c405070a53012
File:  line 0
By rip747:

AFAIK the httpOnly attrirbute is only supported by ACF9. ACF8 and Railo (curretnly) do not support the attribute. this is the issue for railo:

https://issues.jboss.org/browse/RAILO-1339

and a link to the discussion:

http://groups.google.com/group/railo/browse_thread/thread/43ec0d55cc76a088?pli=1

there is also code in the discussion for supporting this in ACF8. AFIAK we aren't dropping ACF8 support until 2.0.