SOSECIO
Local processing active

Cookie parser and security check

Parse Cookie and Set-Cookie headers to check attributes and common configuration risks.

Local-only processing. The page does not submit input to a backend, read the document cookie API, write URL state, or use browser storage. Input limit is 16 KiB.

Mode
Input limit 16 KiB. Auto mode detects Cookie or Set-Cookie headers by header name.

Use copied headers only. This tool does not contact the header origin or read browser cookies.

Structured Cookie result
Name Value Domain Path Expires/Max-Age SameSite Secure HttpOnly Partitioned Attributes
Waiting for input
Redacted JSON / Redacted report
Redacted JSON
Cookie guidance

Request header limits

A Cookie request header contains only name/value pairs, so response attributes must be reviewed from Set-Cookie lines.

Value handling

Values are hidden by default and can only be revealed per row. Report and JSON output stay redacted.

Scope review

Broad Domain, missing Path, and repeated names can change which cookie is sent or overwritten.

Attribute review

Secure, HttpOnly, SameSite, Partitioned, and prefix rules are checked as local parsing hints, not as a site-wide audit.

Official references

Static reference links only. They are not called with page input.

Recommended from common tool workflows. This section does not read or pass page input.

HTTP security headers analyzerAnalyze pasted HTTP response headers locally for common security headers and response cookie attributes.CORS response header analyzerAnalyze pasted CORS response headers locally, with structured tables, policy summaries, and common risk hints.CSP sandbox lookupLook up CSP sandbox directive behavior, iframe sandbox tokens, allow-* combinations, popups, downloads, and navigation limits.Hash calculatorCalculate SHA-1, SHA-256, SHA-384, and SHA-512 digests with Web Crypto for UTF-8, Hex, Base64, and Base64URL byte input.