Skip to content
Ulrich Berntien edited this page Sep 8, 2020 · 3 revisions

TWA-0807

Message

cookie '${cookie_name}' must not contain a 'Domain' attribute

In the message output the variable ${cookie_name} is replaced by the name of the cookie.

Explanation

A cookie was found in the HTTP response with name __Host- prefix and Domain attribute.

The specification does not allow this combination. All cookies with __Host- prefix must not have a Domain attribute.

Remediation

Correct the attributes or the name of the cookie in your web application.

See

Clone this wiki locally