Description
1. The program creates a cookie in Dispatcher.java at line 182, 185 and 199, but fails to set the HttpOnly flag to true.
2. The program creates a cookie in WebAppProxyServlet.java at line 141 and 388, but fails to set the HttpOnly flag to true.