Dev.to
7/1/2026

I built a browser-only HTTP Cookie Inspector — parse Set-Cookie, security score, XSS/CSRF flags, 84 tests
Short summary
Built a free browser-only tool that parses HTTP Set-Cookie headers and scores cookie security (0–100 based on Secure, HttpOnly, SameSite flags). Instantly flags XSS/CSRF risks and provides preset templates for session, persistent, and secure cookie types. Includes 84 tests and runs entirely client-side.
- •Parses Set-Cookie headers with automated security scoring (0–100)
- •Flags XSS/CSRF risks based on missing Secure, HttpOnly, or SameSite attributes
- •Browser-only, free, with 84 passing tests and preset cookie templates
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



