[WLS] cookie-http-only element in weblogic.xml

Q: The cookie-http-only element is in WLS (WebLogic Server) 9.2 and 10.0 (according to the documentation), can I use it with 10.3.0 or 10.3.1?

A: The cookie-http-only element is used for making the session cookies unavailable to browser scripts. The element is one of session-descriptor elements. It was introduced in WLS 10.3.1 and back ported to version 9.2 and 10.0.

For WLS 10.3.0, please log a SR and obtain the patch to enable the element.

Notes:
1. The element is not formally listed in the WLS 10.3.1 documentation.
2. Usage of the element in 10.0 can be found in the documentation.