Auditor de Steaguri Cookie
Verificați atributele cookie-ului (Secure, HttpOnly, SameSite) pentru a detecta setările de securitate lipsă care previn furtul de sesiune și CSRF.
🔒 Acest instrument rulează în întregime în browserul tău. Fișierele tale nu sunt niciodată încărcate pe un server.
Security & Privacy
Cookie Flag Auditor
Frontend preview — no upload or external service.
Audit result
session=abc123: missing Secure, missing HttpOnly, no SameSite. Readable by script, sendable over plain HTTP, and attached to cross-site requests — three separate problems.
How Auditor de Steaguri Cookie works
- Open Auditor de Steaguri Cookie and review the example state before entering your own values.
- Enter or select the information needed for Auditor de Steaguri Cookie.
- Review the result and adjust the inputs if you want to compare another case.
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes. The interactive workspace runs in your browser, so you can review the result without creating an account.
FAQ
What is Auditor de Steaguri Cookie used for?
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes.
Do I need an account?
No. The tool is available directly in the browser without an account or sign-up.
What should I do if the result looks unexpected?
Check the entered values and compare them with the guidance shown in Auditor de Steaguri Cookie. Use the result as a planning aid and verify important decisions independently.