title: Does HTTPOnly flag apply to persistent cookies
body: <p>I understand HTTPOnly flag applies to session cookies. Does it apply to persistent cookies? Is anyone able to provide a reference? I have checked <a href="http://tools.ietf.org/rfc/rfc6265.txt" rel="nofollow">http://tools.ietf.org/rfc/rfc6265.txt</a> on HTTPOnly flag but it is not explicitly stated.</p>