Skip to content
Ulrich Berntien edited this page Sep 10, 2020 · 1 revision

TWA-0809

Message

cookie '${cookie_name}' 'Domain' attribute must match the domain being tested

In the message output the variable ${cookie_name} is replaced by the name of the cookie.

Explanation

A cookie was found in the HTTP response with name __Secure- prefix but with Domain attribute value different than the domain name given as argument to the twa script.

The cookie should contain a 'Domain' attribute value matching the web server. The browser will send the cookie in request to web server with matching URL. So, the names must match.

Remediation

Correct the Domain attribute value of the cookie in your web application.

See

Clone this wiki locally