File:Fig9-No Cookie Write Protection.PNG

Screen shot of unenforced cookie write protection for WebGoat's HTTPOnly lesson.