Cookie Header Generator
Construct valid HTTP Cookie and Set-Cookie header strings instantly with custom attributes and flags.
Set-Cookie: session_id=abc123xyz789; Max-Age=86400; Path=/; SameSite=Lax; Secure; HttpOnly
Header Attributes Reference
1. HttpOnly
Prevents client-side scripts (like JavaScript via document.cookie) from accessing the cookie, mitigating XSS risks.
2. SameSite
Controls whether cookies are sent with cross-site requests, providing protection against Cross-Site Request Forgery (CSRF).
3. Secure
Ensures the cookie is only transmitted over encrypted (HTTPS) connections.