איך מוסיפים לעוגייה את הדגל HttpOnly

Add the HttpOnly attribute when you set the cookie. Examples:
  Set-Cookie: session=...; Secure; HttpOnly; SameSite=Lax
  Express:  res.cookie('session', v, { secure: true, httpOnly: true, sameSite: 'lax' })
  Django:   SESSION_COOKIE_SECURE = True / _HTTPONLY = True / _SAMESITE = 'Lax'
  PHP:      session_set_cookie_params(['secure'=>true,'httponly'=>true,'samesite'=>'Lax'])