SOSECIO
Local processing active
Use tool

Cookie parser and security check

Parse Cookie request headers and Set-Cookie response headers in your browser, then review common attributes such as Secure, HttpOnly, SameSite, Domain, Path, Expires, Max-Age, and Partitioned.

Local-only processing. The page does not submit input to a backend, read the document cookie API, write URL state, or use browser storage. Input limit is 16 KiB.

Mode

Use copied headers only. This tool does not contact the header origin or read browser cookies.

Name Value Domain Path Expires/Max-Age SameSite Secure HttpOnly Partitioned Attributes
Waiting for input
Attribute check

This local check may display cookie names for row review. Use the report for a complete analysis export.

Redacted JSON
Input limit 16 KiB. Auto mode detects Cookie or Set-Cookie headers by header name.

Request header limits

A Cookie request header contains only name/value pairs, so response attributes must be reviewed from Set-Cookie lines.

Value handling

Values are hidden by default and can only be revealed per row. Report and JSON output stay redacted.

Scope review

Broad Domain, missing Path, and repeated names can change which cookie is sent or overwritten.

Attribute review

Secure, HttpOnly, SameSite, Partitioned, and prefix rules are checked as local parsing hints, not as a site-wide audit.

Official references

Static reference links only. They are not called with page input.

Recommended from common tool workflows. This section does not read or pass page input.

HTTP security headers analyzerAnalyze pasted HTTP response headers locally for common security headers and response cookie attributes.CORS response header analyzerAnalyze pasted CORS response headers locally, with structured tables, policy summaries, and common risk hints.CSP sandbox lookupLook up CSP sandbox directive behavior, iframe sandbox tokens, allow-* combinations, popups, downloads, and navigation limits.Hash calculatorCalculate SHA-1, SHA-256, SHA-384, and SHA-512 digests with Web Crypto for UTF-8, Hex, Base64, and Base64URL byte input.