Coders Hub logoCoders Hub

Cookie Attribute Analyzer

Parse Set-Cookie headers and flag security issues.

Works Offline
Privacy First
No Login
No API

Set-Cookie header(s)

One cookie per line, with or without the 'Set-Cookie:' prefix.

Parsed cookies & issues

session= abc123
Domain: (host-only)
Path: /
Secure: true
HttpOnly: true
SameSite: Lax

No issues found.

tracking= xyz
Domain: .example.com
Path: /
Max-Age: 63072000s
Secure: false
HttpOnly: false
SameSite: (default)
  • high
    Missing Secure — cookie can be sent over plain HTTP.
  • medium
    Missing HttpOnly — cookie is readable by JavaScript, risking theft via XSS.
  • low
    No SameSite attribute — defaults vary by browser; set it explicitly.
  • low
    Very long Max-Age (>400 days) — consider shorter-lived sessions.

About the Cookie Attribute Analyzer

Paste one or more Set-Cookie headers to see each cookie's name, value, Domain, Path, Expires, Max-Age, Secure, HttpOnly, SameSite, and Partitioned attributes, with severity-tagged warnings for common security issues.

Examples

Insecure cookie

Set-Cookie: session=abc; SameSite=None

Output

High severity: SameSite=None without Secure

Related tools

CIDR Range Expander

Network & IP

Expand a CIDR block into individual addresses, or compress a range into CIDR blocks.

DNS Record Types Reference

Network & IP

Searchable reference of DNS record types with examples.

HTTP Cache Header Planner

Network & IP

Plan Cache-Control, ETag and max-age headers for any asset type.

HTTP Header Comparator

Network & IP

Diff two sets of HTTP headers, case-insensitively.

HTTP Headers Explainer

Network & IP

Look up common HTTP headers and explain pasted raw headers.

HTTP Status Codes

Network & IP

Searchable reference of HTTP status codes with meaning and usage guidance.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-10 · Runs entirely in your browser