title: Will http_only cookies be sent with AJAX?
body: <p>I found this <a href="https://stackoverflow.com/questions/27972/how-do-httponly-cookies-work-with-ajax-requests">link</a></p>
  
  <p>But at the bottom it says <strong>This information is likely no longer up to date.</strong>
  So my question is, will http_only cookies be sent with AJAX? Can the response via AJAX set http_only cookies?</p>
  
  <p>Edit 1: Let's say an user logged in to the system. His session started and http_only cookie is set. He tries to fetch list of his friends via AJAX and sends JSON. When making the AJAX request, do I need to make anything special to say to send cookies or not? Will each request send the cookies to the server by default? Will the response send back cookies (let's say I am updating users' time for last activity)?</p>