Referring to this question (Not all Splunk cookies have the HttpOnly tag set) , answered by @anaidu_splunk , I can see that some of the cookie couldn't be set with httponly tag due to it's usage on the scripting elements, so setting them as httponly would break the web interface functionality.
I would like to get information on the splunkweb_uid cookies that was also didn't have the httponly tag. Can someone help to verify that this cookie doesn't contain any secure information that could be exploit by third party. Below are the screenshot from my splunk portal with the cookies information for reference :-
