ServiceStack/ServiceStack — pull request #408 by leon-andria (2013-01-18 22:17:30+00:00)
Title: We need to protect Cookies from malicous Javascript. By setting HttpOnly...

... to true, cookies should only accessible by the server. This is a Security Best Practices.