Datatypes

HTTP Cookie header value

ID http_cookie

DatatypeNot PIIDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Value of the HTTP Cookie request header: one or more cookie-name=cookie-value pairs separated by a semicolon and a space, as RFC 6265 defines it. Cookies often carry session identifiers, so the value can grant access to an account.

Categories
Internet, Secrets and credentials (passwords, keys, tokens)
Countries
Global (not tied to a country)
Languages
Common to most languages
MISP attribute type
cookie
Quality
88/100 · missing: second example, translation
Metacrafter rules
no detection rule yet
Supported by tools
Datadog Sensitive Data Scanner

Regular expression

^[!#$%&'*+.^_`|~0-9A-Za-z-]+=(?:"[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*"|[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*)(?:; [!#$%&'*+.^_`|~0-9A-Za-z-]+=(?:"[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*"|[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*))*$

Python re syntax.

Examples

ValueDescription
SID=31d4d96e407aad42; lang=en-USExample from RFC 6265
SID=31d4d96e407aad42;lang=en-US invalidNo space after the semicolon

Sources

Use this record