It seems that the Python Cookie module (used by Zope for cookie handling) does not support custom attributes, such as HttpOnly.
It seems that the Python Cookie module (used by Zope for cookie handling) does not support custom attributes, such as HttpOnly.