What is an HTTPOnly Cookie?

HTTPOnly cookies are cookies with the “HTTPOnly” tag. This tag prevents client-side servers from accessing information stored in these cookies. As a result, these cookies can store information, such as authentication tokens, without exposing the data to cross-site scripting vulnerabilities.