Skip to content
Ulrich Berntien edited this page Sep 9, 2020 · 1 revision

TWA-0808

Message

cookie '\${cookie_name}' must contain a 'Path' attribute

In the message output the variable ${cookie_name} is replaced by the name of the cookie.

Explanation

A cookie was found in the HTTP response with name __Host- prefix and no Path attribute.

The specification does not allow this combination. All cookies with __Host- prefix must have Path attribute with value /. No other value is allowed.

Remediation

Add a Path attribute with value / or remove the reserved cookie name prefix in your web application.

See

Clone this wiki locally