I've been seeing our AppScan tools tagging cookie headers from Akamai in low severity. Mostly tagged as missing attributes of "HTTPOnly" and "Secure" flag.
The question here is should I fully ignore those flagged issues as these are false positives? or should I set the issue "Informational"? Thanks in advance!