class Rack::Test::Cookie

def http_only?

a javascript API.
Whether the cookie has the httponly flag, indicating it is not available via
def http_only?
  @options.key?('httponly')
end