EllisLab/CodeIgniter — pull request #917 by fsateler (2012-01-11 17:20:35+00:00)
Title: Enable use of HTTPONLY cookies for session data when available

HTTPONLY enables one to hide cookies from the javascript code. This is useful to help prevent XSS attacks.

http://en.wikipedia.org/wiki/HTTP_cookie#HttpOnly_cookie