And if not is it easy enough to do? I would hope I can read the header and append HTTPOnly to each cookie.
This is for a ASP classic site not .NET