Attribute audit
Audit Set-Cookie headers in one paste.
Paste the Set-Cookie lines from curl -I or DevTools. The
checker reports missing Secure, HttpOnly, SameSite,
conflicting attributes, and misuse of the __Host- / __Secure-
prefixes.
Set-Cookie headers
One Set-Cookie line per entry. Lines that do not start with Set-Cookie: are ignored.
Related reading
The patterns the checker looks for.