php_value session.cookie_httponly 1
document.cookie = 'test'; alert(document.cookie);
If I do not receive a blank alert or an error to console I would consider that a failed test. How do I need to be setting this up in
.htaccess and how should I be testing for effectiveness?