title: how to set HttpOnly and Secure flag set in apache2.4.6 and tomcat
body: <p>I have an apache2.4.6 and dotcms2.3.2 in suselinux. I want to set httponly and secure falg in dotcms and tomcat . I set  these configurations in apache and tomcat: 
  <code>&lt;Context useHttpOnly="true"&gt;</code> in <code>context.xml</code>
  <code>&lt;Connector maxThreads="400" connectionTimeout="3000" port="8080" protocol="HTTP/1.1" redirectPort="8443" URIEncoding="UTF-8" secure="true" /&gt;</code>  in <code>server.xml</code></p>
  
  <pre><code>Header edit Set-Cookie ^(.*)$ $1;HttpOnly   
  </code></pre>
  
  <p>or </p>
  
  <pre><code>Header set Set-Cookie HttpOnly;Secure
  </code></pre>
  
  <p>in <code>httpd.conf</code>.</p>
  
  <p>after that restart tomcat and test with burp suite , but it does't set in cookie . </p>