Protecting Your Cookies: HttpOnly

Nah. You should be using proper templating engine that doesn’t allow leaking of data into markup (e.g. XSLT or TAL)