I have a web application deployed through Drupal-7.43. I need to modify the 'has_js' cookie that is set by Drupal. I need to modify 'has_js' cookie so it becomes both Http-only and Secure for a site security review.

Also, what are Pros and cons of making 'has_js' cookie Http-only and Secure?