Cookie Security

Definitions

1. The set of controls and attributes used to protect cookies, such as Secure, HttpOnly, SameSite, scope restrictions, and sound session design. Weak cookie security often turns otherwise small web flaws into account compromise.

   In plain English: The practices used to keep browser cookies from being stolen or misused.

   Example: "The review flagged poor cookie security because the session cookie lacked both HttpOnly and SameSite protections."

Related Terms

• XSS
• CSRF
• OWASP
• Authentication Token
• Cookie Hijacking
• Malvertising
• Privileged Session
• Reflected Input
• Request Forgery
• Reverse Proxy Security