=== Message Make sure creating this cookie without the "HttpOnly" flag is safe.