Which clientless SSLVPN supported feature works when the http-only-cookie command is enabled?

Citrix load balancer integration depends on cookie inspection and manipulation techniques that are blocked when cookies carry the HttpOnly flag, preventing JavaScript from reading or modifying session state.

Port-reflector functionality requires JavaScript access to session cookies to manage port-forwarding state, which is broken when http-only-cookie is enabled.

The Java rewriter dynamically rewrites Java applet references in web pages using JavaScript-based session tracking that cannot function when session cookies are marked HttpOnly.

Java plug-ins in clientless SSLVPN communicate through a Java applet that interacts with the browser's HTTP stack directly, bypassing the JavaScript layer restricted by the HttpOnly flag. Because the session cookie remains accessible to HTTP requests made by the Java applet, Java plug-ins operate normally when http-only-cookie is enabled. This makes Java plug-ins uniquely compatible with this security setting among the listed features.

The script browser relies on JavaScript to handle session cookies for navigation and state management, which is incompatible with HttpOnly-flagged cookies.