Online Tool Store
Cookie-Flag-Auditor
Überprüfen Sie Cookie-Attribute (Secure, HttpOnly, SameSite) auf fehlende Sicherheitseinstellungen zur Vermeidung von Session-Hijacking und CSRF.
🔒 Dieses Tool läuft vollständig in Ihrem Browser. Ihre Dateien werden niemals an einen Server hochgeladen.
Security & Privacy
Cookie Flag Auditor
Frontend preview — no upload or external service.
Audit result
session=abc123: missing Secure, missing HttpOnly, no SameSite. Readable by script, sendable over plain HTTP, and attached to cross-site requests — three separate problems.
How Cookie-Flag-Auditor works
- Open Cookie-Flag-Auditor and review the example state before entering your own values.
- Enter or select the information needed for Cookie-Flag-Auditor.
- Review the result and adjust the inputs if you want to compare another case.
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes. The interactive workspace runs in your browser, so you can review the result without creating an account.
FAQ
What is Cookie-Flag-Auditor used for?
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes.
Do I need an account?
No. The tool is available directly in the browser without an account or sign-up.
What should I do if the result looks unexpected?
Check the entered values and compare them with the guidance shown in Cookie-Flag-Auditor. Use the result as a planning aid and verify important decisions independently.