Skip to main content
sus.botdocs
  • SEO
  • AI
  • QA
  • Privacy
  • Accessibility
  • Security
  1. Docs
  2. Security
  3. Cookie attributes contradict each other or the connection

Security audit

Cookie attributes contradict each other or the connection

5 checks · 1 findings · scope: page, site

Audit id: security.conflict.cookie_attributes.

Checks

  • Cross-site cookie without Secure flag samesite_none_without_secure
  • Secure cookie set over unsecured HTTP secure_cookie_set_over_http
  • Cookie name prefix rules violated host_prefix_rules_violated
  • Same cookie with different flags per page same_cookie_with_different_flags_on_different_pages
  • Session cookie readable by scripts on some pages session_cookie_readable_by_script_on_some_pages

Findings

  • A cookie is set with attributes that contradict each other or differ between pages

What this relies on

The strictest instance is the intended one.

How to verify by hand

No outside source needed.

  • All audits
  • About sus.bot
  • Open the app
  • Contact support