title: Setting the HttpOnly attribute for the NodeJS cookie header
body: <p>I'm trying to figure out how to set the HttpOnly attribute for the set-cookie header, specifically for native NodeJS.</p>
  
  <p>Right now, I have this code, but it doesn't work because I can still access the cookies with client side javascript.</p>
  
  <pre><code>response.setHeader('Set-Cookie', ['HttpOnly']);
  </code></pre>