--- lib/cookie.c.old	2007-11-07 10:21:35.000000000 +0100
+++ lib/cookie.c	2008-01-22 02:01:53.000000000 +0100
@@ -433,6 +433,18 @@
     char *tok_buf;
     int fields;
 
+    /* IE introduced HTTP-only cookies to prevent XSS attacks. Cookies 
+       marked with httpOnly after the domain name are not accessible  
+       from javascripts, but since curl does not operate at javascript  
+       level, we include them anyway. In Firefox's cookie files, these 
+       lines are preceeded with #HttpOnly_ and then everything is
+       as usual, so we skip 10 characters of the line..
+    */
+    if (strncmp(lineptr, "#HttpOnly_", 10) == 0) {
+      lineptr += 10;
+    }
+
+
     if(lineptr[0]=='#') {
       /* don't even try the comments */
       free(co);