#1638033: add support for httponly on Cookie.Morsel
Reviewer: Benjamin
diff --git a/Doc/library/cookie.rst b/Doc/library/cookie.rst
index 346da5a..b6a85f5 100644
--- a/Doc/library/cookie.rst
+++ b/Doc/library/cookie.rst
@@ -148,7 +148,7 @@
--------------
-.. class:: Morsel()
+.. class:: Morsel
Abstract a key/value pair, which has some :rfc:`2109` attributes.
@@ -162,9 +162,17 @@
* ``max-age``
* ``secure``
* ``version``
+ * ``httponly``
+
+ The attribute :attr:`httponly` specifies that the cookie is only transfered
+ in HTTP requests, and is not accessible through JavaScript. This is intended
+ to mitigate some forms of cross-site scripting.
The keys are case-insensitive.
+ .. versionadded:: 2.6
+ The :attr:`httponly` attribute was added.
+
.. attribute:: Morsel.value