Figure 7

Figure 7: Session Cookie HttpOnly flag.