MediaWiki:Configure-setting-wgCookieHttpOnly/en

Set authentication cookies to httpOnly