Sensitive Cookie Missing 'HTTPONLY' Attribute

Thanks!! I did find that the audit was running the scan against the URL so it caused it to return a 302 redirect response

and the redirect response was where the HTTPOnly attribrute was missing from. With the addition of the if/else clause this resloved the problem.

Thanks again,

Bob