diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml
index 67747101..0244c159 100755
--- a/src/main/webapp/WEB-INF/web.xml
+++ b/src/main/webapp/WEB-INF/web.xml
@@ -18,4 +18,12 @@ PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
   <url-pattern>/*</url-pattern>
 </filter-mapping>
 
+<!--set  the status of HttpOnly and Secure cookie flags-->
+<session-config>
+  <cookie-config>
+    <secure>true</secure>
+    <http-only>true</http-only>
+  </cookie-config>
+</session-config>
+  
 </web-app>