fix comment

edvraa · edvraa · commit a24c1c81141d · 2021-05-03T00:36:38.000+03:00
diff --git a/javascript/ql/src/semmle/javascript/security/InsecureCookie.qll b/javascript/ql/src/semmle/javascript/security/InsecureCookie.qll
@@ -1,5 +1,5 @@
 /**
- * Provides classes for reasoning about cookies added to response without the 'secure' flag being set.
+ * Provides classes for reasoning about cookies added to response without the 'secure' or 'httponly' flag being set.
  * A cookie without the 'secure' flag being set can be intercepted and read by a malicious user.
  * A cookie without the 'httponly' flag being set can be read by an injected JavaScript
  */
