Which Set$-$Cookie option $($also called directive$)$ prevents client$-$side JavaScript $($that is$,$ JavaScript run in the browser$)$ from accessing cookies?

Question $3$ options:

HttpOnly

Secure

SameSite

expires

no such option exists