title: How to set an HTTPONLY cookie in Flask
body: <p>I read <a href="https://stackoverflow.com/questions/45218195/set-secure-attribute-for-flask-cookies">Set &quot;secure&quot; attribute for Flask cookies</a>, but it's for setting secure cookies, but I'm trying to set HTTPONLY cookies. They both are kind-of-secure cookies, but differ in specs (<a href="https://resources.infosecinstitute.com/securing-cookies-httponly-secure-flags/" rel="noreferrer">read more</a>).</p>
  
  <p>The cookie needs to be protected because it is about users' logging in information.</p>