From 825f9ad7fd8823bfe5a39c2019aace09b64f2e35 Mon Sep 17 00:00:00 2001
From: Thyodas <guillaume.hein@epitech.eu>
Date: Tue, 16 Jun 2026 10:48:06 +0200
Subject: [PATCH] Fixed missing HttpOnly in CmsFlexResponse addCookie method

---
 src/org/opencms/flex/CmsFlexResponse.java | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/org/opencms/flex/CmsFlexResponse.java b/src/org/opencms/flex/CmsFlexResponse.java
index 55c41f35be8..53ea6f6be85 100644
--- a/src/org/opencms/flex/CmsFlexResponse.java
+++ b/src/org/opencms/flex/CmsFlexResponse.java
@@ -435,6 +435,11 @@ public void addCookie(Cookie cookie) {
             header.append("; Secure");
         }
 
+        // HttpOnly
+        if (cookie.isHttpOnly()) {
+            header.append("; HttpOnly");
+        }
+
         addHeader("Set-Cookie", header.toString());
     }